[....] Starting OpenBSD Secure Shell server: sshd[ 29.634267] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.543834] random: sshd: uninitialized urandom read (32 bytes read) [ 31.886085] kauditd_printk_skb: 9 callbacks suppressed [ 31.886092] audit: type=1400 audit(1572608867.960:35): avc: denied { map } for pid=6862 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.942117] random: sshd: uninitialized urandom read (32 bytes read) [ 32.539335] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. [ 38.187843] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/01 11:47:54 fuzzer started [ 38.378653] audit: type=1400 audit(1572608874.450:36): avc: denied { map } for pid=6873 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.015708] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/01 11:47:56 dialing manager at 10.128.0.105:44363 2019/11/01 11:47:56 syscalls: 2516 2019/11/01 11:47:56 code coverage: enabled 2019/11/01 11:47:56 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/01 11:47:56 extra coverage: extra coverage is not supported by the kernel 2019/11/01 11:47:56 setuid sandbox: enabled 2019/11/01 11:47:56 namespace sandbox: enabled 2019/11/01 11:47:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/01 11:47:56 fault injection: enabled 2019/11/01 11:47:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/01 11:47:56 net packet injection: enabled 2019/11/01 11:47:56 net device setup: enabled 2019/11/01 11:47:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist [ 41.189877] random: crng init done 11:49:13 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xe99f, 0x140) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/247, &(0x7f0000000140)=0xf7) r1 = socket$isdn(0x22, 0x3, 0x3) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000200)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x150, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74d1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x56a, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x6, 0x7fffffff, 0x5}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000005c0)={r4, 0x9}, &(0x7f0000000600)=0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000640)={{0x5}, {0x1, 0x1}, 0x5, 0x5, 0x81}) r5 = syz_open_dev$admmidi(&(0x7f00000006c0)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000700)={0x2, "70eca634200cf25a7e48b6152d899e56b738d2f6a612552cc734c76d46f92d30", 0x4, 0x0, 0xfff, 0x9, 0x0, 0x2, 0x4, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000780)='/dev/video35\x00', 0x2, 0x0) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000800)={r4, 0x9}, &(0x7f0000000840)=0x8) mknod(&(0x7f0000000880)='./file0/file0\x00', 0x8, 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f0000000900)={0x0, 0xcf, 0x100, 'queue0\x00'}) r8 = creat(&(0x7f00000009c0)='./file0/file0\x00', 0x85) getsockopt(r8, 0xc2c9, 0x4, &(0x7f0000000a00)=""/15, &(0x7f0000000a40)=0xf) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00') r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/hwrng\x00', 0x60c0c0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x81000020}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x4, 0x7, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000c40)='cgroup.type\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r11, &(0x7f0000000c80)='trusted.overlay.upper\x00', &(0x7f0000000cc0)={0x0, 0xfb, 0xf7, 0x1, 0xe9, "0242a32d9d5d93d2b1b804a34c05ea5b", "1c8142fecbf03af53b8969d9eb2010982c07ea364c6fbfc61cc62c067a205c51f7e8f2dee688f62001fb64c4b470c5afd0504e0fae26380f7d85d25dfb80856d0f237cb0c9184a8368677aafa9e26226d56873890c9bebbfe6496766aeb21a5e681f4a6e025edacfe300b1eca684e0f90b90cf3b311ef03320fb5e16abd6bd477fc0af8cf235c45a4142f2987b0bc7f5cea238f4c2dd846d2c8430b3385fe433e56c100b5a14444e078b17b5194882c1dedfa014197bb9c4c5c585b80282d36efc4136033e1f9fe9e300326aee75b6cfe1291268531df6d93776b9d46e36f08842b1"}, 0xf7, 0x1) 11:49:13 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x57fb4bc1b9ed3a63, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000040)=""/55, 0x37, 0x10000, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0xd7, 0x6, @local}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)="b72199139aa4f4dfcd9e8900d0afdef3146443a62d1be4d6794fb130316d44aa43cbc192218c9648d442d8f3e818e10caeba0713f9c1607bcf278f6964ed4e4cbeb369cedbc956a5a89abaa2770ecc7ecb17342a70a9a2de5fef3d845f56256d31e282b9f948693f2a4397222841858777ca148915eabb73d7f6734ad0af87aba02b451d02c00c8536f1c7429f193ba2c7bc77b2c4d570da93de4318761bb75d86aeb35d1e1bc4012aa1b7a26233f7e1eca632b34206fd64f6f9dcb6f9a3876a22776ae7c6c9cdde02e78ee156845073c37f7c") madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'\x00', 0xe0000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) accept4$netrom(r3, &(0x7f0000000300)={{0x3, @null}, [@netrom, @rose, @remote, @netrom, @default, @remote, @netrom, @netrom]}, &(0x7f0000000380)=0x48, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getroute={0x14, 0x1a, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55d3ca358cc3473c}, 0x4014) accept4$netrom(r3, &(0x7f00000004c0)={{}, [@default, @bcast, @netrom, @rose, @null, @rose, @netrom, @rose]}, &(0x7f0000000540)=0x48, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x200002, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000005c0)={{0x747c89e0ddcf7392, @name="058daf99e5856ca18cc9628b935d06e709d70ba93f04c96361ac4d0683ea8a63"}, "ac6d68ccce7b8d83920aa7d7803c93531bf8098f89d8341e2c63bb93a93ed4df", 0x1}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000700)={0xff, @remote, 0x4e24, 0x1, 'sh\x00', 0x2, 0x2}, 0x2c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer\x00', 0x4140, 0x0) pwrite64(r6, &(0x7f0000000780)="ede75bf1d7c044bf338ea6936148e901f62f07691095e5e59627181ba0e6ab6ebe7c29d9fcc4a983d2507d264975836e3330dd059935f284345fb0426e6f62a146d83be3aad63e0794f94c0f5a6577fc098c4976946ca123ba93be61bf2f41cef387d0f82a5b43a8c8d676499aaac7c3d8faf77e102270dab95c1dcb1d9cafd8db6b0de46ca15377754fd0dddd7d22db58c7b06a8fa6ca50c790", 0x9a, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000840)='/dev/radio#\x00', 0x0, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000880)=0x4, 0x4) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000008c0)=""/145) r8 = syz_open_dev$vbi(&(0x7f0000000980)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f00000009c0)={0xb, {0x10000, 0xfffffffb, 0x7c000000, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000a00)={0x81, 0x2, 'client0\x00', 0xffffffff80000001, "7d3742af836d9850", "9f703c2d25ef1990109735479e7f48c883b5dde4233bbf0910a453ae00e1d029", 0x1, 0x1f}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r9, &(0x7f0000000ac0)=""/217, 0xd9, 0x0, &(0x7f0000000bc0)={0x2, 0x4e21, @multicast2}, 0x10) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f0000001c80)={{&(0x7f0000000c40)=""/4096, 0x1000}, &(0x7f0000001c40), 0x10}, 0x20) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000001cc0)={0xa, 0x21, 0x14, 0xe, 0x1, 0x5, 0x5, 0x70}) getpid() lsetxattr$security_smack_transmute(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001d80)='TRUE', 0x4, 0x0) 11:49:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x48000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x40400) ioctl$TIOCCONS(r1, 0x541d) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10a00, 0x50) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x80000000, @mcast1, 0x1}}}, {&(0x7f0000000140)=""/9, 0x9}, &(0x7f0000000180)}, 0xa0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0xdfcdbcdd56827d1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@sha1={0x1, "7ee850759c3bd9e2d6fd862372576ce039f90b01"}, 0x15, 0x1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getpeername$ax25(r5, &(0x7f0000000500)={{}, [@netrom, @bcast, @remote, @bcast, @default, @default, @bcast, @netrom]}, &(0x7f0000000580)=0x48) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000005c0)={0x200}, 0x0, &(0x7f0000000640)={r6, r7+30000000}, 0x8) r8 = syz_open_dev$media(&(0x7f0000000680)='/dev/media#\x00', 0x9, 0x540) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000006c0)={0x0, 0x0, 0x5, [0x0, 0x6, 0x3, 0x9, 0x1]}, &(0x7f0000000700)=0x12) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000740)={r9, 0x3, 0x8}, &(0x7f0000000780)=0x8) r11 = dup3(r3, 0xffffffffffffffff, 0x80000) sync_file_range(r11, 0x1, 0xffffffff00000000, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f00000007c0)=@generic={0x3, 0x6, 0x200}) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm_plock\x00', 0x30000, 0x0) ioctl$SCSI_IOCTL_SYNC(r13, 0x4) syz_open_dev$mouse(&(0x7f0000000840)='/dev/input/mouse#\x00', 0x0, 0x80000) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000940)={r10, 0x1}, 0x8) r15 = syz_open_dev$vivid(&(0x7f0000000980)='/dev/video#\x00', 0x3, 0x2) fcntl$getflags(r15, 0x1) 11:49:13 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x10000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0xd, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) waitid(0x2, r3, &(0x7f0000000240), 0x1, 0x0) r4 = fanotify_init(0x10, 0x80000) ioctl$void(r4, 0x5450) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x5, 0x0, 0x3, 0xff}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000340)={r5, 0x1a, 0x7ff}, 0x8) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x8000, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000003c0), 0x4) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f00000005c0)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f00000007c0)={'broute\x00'}, &(0x7f0000000840)=0x78) r11 = syz_open_dev$dmmidi(&(0x7f0000000880)='/dev/dmmidi#\x00', 0x4, 0x5b1200) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f00000008c0)={0x3, 0xb81c, 0x401, 0x9, 0x3fd5, 0x1}) r12 = socket$unix(0x1, 0x2, 0x0) sendmsg$sock(r12, &(0x7f0000000b80)={&(0x7f0000000900)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="120c81ebbaa3731cdf628bf3d481a17aeb42bf61b5d0e8b1ca7786c5f6c040d02d05fe75590e05f5188fbf362e1c4ed1673fb4f87d415e58033d3101ae8feac3f1af8a2b7df7d59c13bb18d2c7ada2c7de50795fb66ddd49502a0b336f8695d9b5afb47eca244e57c944d41bb080a4525b4993d22a97f6f615e2e01eb2e73d29809f71dceae9ba64aac96bb838a612fac3e46bec416f553f422f8f5b03dbbdd8477cf0a1f16ecbde02e2e8b6ecdd880607bdc39d968c5ddd9d6c9adec5a1a5950397d5624bebb7ded411c2fcc2707fd288b0b4093bde333ba30de7add85f0d792d824eb8639236", 0xe7}], 0x1, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x47e}}, @txtime={{0x18, 0x1, 0x3d, 0x60000000}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x90}, 0x1000) r13 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vsock\x00', 0x0, 0x0) shutdown(r13, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000c00)={r5, @in={{0x2, 0x4e24, @local}}, 0x5, 0x6, 0x269, 0x4, 0x4}, 0x98) r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r14, 0x4030560b, &(0x7f0000000d40)={0xf19775bb59ebd301, 0x0, &(0x7f0000000d00)="05f43a4b64be", {0xfffffffe, 0x80000001, 0x3436324d, 0x9, 0x1, 0x2e, 0xc, 0x4}}) 11:49:13 executing program 4: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x2, @start={0x9, 0x1}}) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='{\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) r3 = dup2(0xffffffffffffffff, r0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000240)=0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) lseek(r3, 0x0, 0x3) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x3, 0x6, [0xfffa, 0x80, 0xf0, 0x1000, 0x5, 0x1000]}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @loopback}}, 0x3f, 0x7, 0x1ff, 0x0, 0x1}, 0x98) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0xa, 0x0, [], [{0x4, 0x6, 0xfffffffffffff965, 0x9, 0xebf, 0x5}, {0x6, 0x5f8a, 0xffff, 0x6, 0x9, 0x5}], [[], [], [], [], [], [], [], [], [], []]}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x40100, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000007c0)=0x14, 0x4) r7 = accept4(0xffffffffffffffff, &(0x7f0000000ac0)=@x25, &(0x7f0000000b40)=0x80, 0x80000) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000b80)={'gretap0\x00', 0x7, 0xdacc}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/btrfs-control\x00', 0xa0100, 0x0) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000cc0)={0x3, 0x0, [{0x80000000, 0x4, 0x0, 0x0, @sint={0x100, 0x1ff}}, {0x8000}, {0x3, 0x1, 0x0, 0x0, @sint={0x3, 0xfffffffd}}]}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000d80)='/dev/snd/pcmC#D#p\x00', 0x7, 0x202000) write$cgroup_subtree(r9, &(0x7f0000000dc0)={[{0x6, 'io'}, {0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x6, 'pids'}, {0x2d, 'memory'}]}, 0x26) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/relabel\x00', 0x2, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000010c0)={0x0, 0x3, 0xc3, 0xf8, @buffer={0x0, 0x19, &(0x7f0000000e40)=""/25}, &(0x7f0000000e80)="c282769754198a02c6c3b5505957c0e00b314e45b979909660a8d62d54c94e2c7f64a15f8ca77d27d07a0bfc0737bd01605a2a7ff616c7fd0519d7b6226af04a0fe2d583b88c0b5884e01daa56ef091c9729927b3c3f4eeabf8a64b197704a5ce6b7cb795f07bed6d43b267da3c68f5852c2bb63c7e22ef09859acb19313b9fbd42bfaa76d0e77666607d7d97af2c8327d8c09df3e9e68ba4efe72bfb00f3839cd361dd44f8885443c729ed5c7828fcafb559cc0317328a30d3cf2bd9749f47f50c5e8", &(0x7f0000000f80)=""/232, 0x3ff, 0x74, 0x3, &(0x7f0000001080)}) r10 = syz_open_dev$dmmidi(&(0x7f0000001140)='/dev/dmmidi#\x00', 0x7, 0x400) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000001180)=r5, 0x4) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000011c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000001200)=[@sack_perm, @sack_perm], 0x2) 11:49:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"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"}) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000440)) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) fsetxattr$security_capability(r1, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)=@v2={0x2000000, [{0x5, 0x58}, {0x9, 0xffffffff}]}, 0x14, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x8, @local, 0x7}}, 0x5, 0x1f, 0x5, 0x2, 0x1}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={r2, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x1}}, 0x1, 0x100, 0x20, 0x80000000, 0xfffffc00}, &(0x7f0000000700)=0x98) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/checkreqprot\x00', 0x116182, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000780)=0x1) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/mixer\x00', 0x94080, 0x0) fcntl$addseals(r4, 0x409, 0x12) r5 = syz_open_dev$mice(&(0x7f0000000a00)='/dev/input/mice\x00', 0x0, 0x8dfcdb85390ebc4e) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r6 = socket$alg(0x26, 0x5, 0x0) listen(r6, 0x1ff) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/cachefiles\x00', 0x4502, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = socket$isdn(0x22, 0x3, 0x0) write$binfmt_elf64(r8, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3f, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x290, 0x40, 0x20, 0x80, 0x0, 0x38, 0x1, 0x0, 0x8, 0x1000}, [{0x6474e551, 0x101, 0x96c3, 0x8, 0x0, 0x7, 0x0, 0x7f}, {0x4, 0x81, 0x6, 0x7bb4, 0x75, 0x9952, 0x80000000, 0xc99}], "55988d8589e9bd87b5d0d16fb338f2b8ce89f9e38e53af66ed9912a9e49e73268aefa0f478dbf0e990d188720757b8a64db17b9726be2cda9400b398cbd95cf8d660bfa08f0300550620709586f6a441fde23de9413f564439f6d185d16745f9", [[], [], [], [], [], [], [], []]}, 0x910) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/kvm\x00', 0xf8ff4fe8d1fd3569, 0x0) fsetxattr$security_selinux(r9, &(0x7f0000001480)='security.selinux\x00', &(0x7f00000014c0)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x1) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r10, 0x89e0, &(0x7f0000001500)) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000001540)=0xf0ea) r12 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001580)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r12, 0xc02c5638, &(0x7f00000015c0)={0xec, 0x2, 0x8}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r13, 0x80dc5521, &(0x7f0000001640)=""/246) [ 117.568005] audit: type=1400 audit(1572608953.640:37): avc: denied { map } for pid=6873 comm="syz-fuzzer" path="/root/syzkaller-shm994538669" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 117.670147] audit: type=1400 audit(1572608953.660:38): avc: denied { map } for pid=6890 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13777 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 117.782827] IPVS: ftp: loaded support on port[0] = 21 [ 118.597919] chnl_net:caif_netlink_parms(): no params data found [ 118.611949] IPVS: ftp: loaded support on port[0] = 21 [ 118.634903] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.641663] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.649710] device bridge_slave_0 entered promiscuous mode [ 118.657203] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.663716] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.671033] device bridge_slave_1 entered promiscuous mode [ 118.694897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.707425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.728286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 118.735540] team0: Port device team_slave_0 added [ 118.742674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 118.749651] team0: Port device team_slave_1 added [ 118.757372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.767948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.800945] IPVS: ftp: loaded support on port[0] = 21 [ 118.821860] device hsr_slave_0 entered promiscuous mode [ 118.860298] device hsr_slave_1 entered promiscuous mode [ 118.900629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 118.907675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 118.963926] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.970400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.977701] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.984096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.003294] chnl_net:caif_netlink_parms(): no params data found [ 119.053304] IPVS: ftp: loaded support on port[0] = 21 [ 119.103310] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.109729] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.117620] device bridge_slave_0 entered promiscuous mode [ 119.124588] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.131002] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.137993] device bridge_slave_1 entered promiscuous mode [ 119.158891] chnl_net:caif_netlink_parms(): no params data found [ 119.182484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.195041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.243634] IPVS: ftp: loaded support on port[0] = 21 [ 119.257107] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.267363] team0: Port device team_slave_0 added [ 119.273240] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.279702] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.287266] device bridge_slave_0 entered promiscuous mode [ 119.294056] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.300478] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.307387] device bridge_slave_1 entered promiscuous mode [ 119.323910] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 119.331239] team0: Port device team_slave_1 added [ 119.337388] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 119.343526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.358353] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.366928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.378783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.390455] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.399399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.453220] device hsr_slave_0 entered promiscuous mode [ 119.491083] device hsr_slave_1 entered promiscuous mode [ 119.543227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.553945] team0: Port device team_slave_0 added [ 119.572892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 119.594008] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.600868] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.607691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 119.627711] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.634546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 119.642140] team0: Port device team_slave_1 added [ 119.647693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 119.662594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.669493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.679538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.690854] chnl_net:caif_netlink_parms(): no params data found [ 119.705689] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 119.713408] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.719638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.748025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 119.802344] IPVS: ftp: loaded support on port[0] = 21 [ 119.816285] device hsr_slave_0 entered promiscuous mode [ 119.860320] device hsr_slave_1 entered promiscuous mode [ 119.921165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 119.928895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.936738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.944431] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.950812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.968997] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 119.976043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 120.006313] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.013718] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.020870] device bridge_slave_0 entered promiscuous mode [ 120.031247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 120.078538] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.085216] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.092417] device bridge_slave_1 entered promiscuous mode [ 120.099241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.107851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.116808] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.123168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.132539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 120.149202] chnl_net:caif_netlink_parms(): no params data found [ 120.163856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.175235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 120.187820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 120.208439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 120.219299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 120.232993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.240882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.248417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.256638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.270752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 120.295186] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 120.302829] team0: Port device team_slave_0 added [ 120.308822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 120.321801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.329521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.340570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.347499] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.357545] team0: Port device team_slave_1 added [ 120.371390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.379066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.402898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 120.443936] device hsr_slave_0 entered promiscuous mode [ 120.490314] device hsr_slave_1 entered promiscuous mode [ 120.565528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 120.572147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.579582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.588664] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.595172] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.602230] device bridge_slave_0 entered promiscuous mode [ 120.608751] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.615232] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.622491] device bridge_slave_1 entered promiscuous mode [ 120.633880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 120.647265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 120.685325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 120.693104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 120.704790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.712209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.719112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.726649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.735874] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 120.742360] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.749647] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 120.778091] chnl_net:caif_netlink_parms(): no params data found [ 120.788583] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 120.794817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.804924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 120.823869] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 120.847079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.857499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.865873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.873741] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.880108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.887321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 120.894497] team0: Port device team_slave_0 added [ 120.901001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 120.908010] team0: Port device team_slave_1 added [ 120.915172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 120.923855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.931025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.938597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.946209] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.952566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.962402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 120.970170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.985210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.998215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.052500] device hsr_slave_0 entered promiscuous mode [ 121.090395] device hsr_slave_1 entered promiscuous mode [ 121.139364] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 121.146250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.154641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.166065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 121.173099] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.179509] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.186588] device bridge_slave_0 entered promiscuous mode [ 121.193776] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.202463] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.209368] device bridge_slave_1 entered promiscuous mode [ 121.231295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 121.239245] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 121.251160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.258175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.283343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.290524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.297415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.306346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 121.315292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 121.328068] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 121.334219] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.342999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.360700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.367682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 121.386188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 121.393790] team0: Port device team_slave_0 added [ 121.399251] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 121.407481] team0: Port device team_slave_1 added [ 121.413616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.421828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.429507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.438078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 121.446608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 121.457688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.465441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.473382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.481337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.488997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.496758] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.503112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.509988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.520502] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 121.527326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 121.535622] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 121.545512] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 121.551701] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.559119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 121.575606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.583181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.590963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.598599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.607048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.617680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 11:49:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="f0808100000066b8010000000f01d9f0825f2c33260f5a87c0f3660f38801e04000f0bba2100ecc4c221cf042500900f01c9", 0x32}], 0x1, 0xcffa808b513f9dfc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000080)={{0xd000, 0x4, 0x9, 0x5, 0x40, 0x3, 0x0, 0x40, 0x20, 0x65, 0x4, 0x2}, {0x10000, 0x4000, 0x3, 0x80, 0xe1, 0x40, 0x5, 0x6, 0x1f, 0x7, 0x0, 0x7b}, {0xf000, 0x1000, 0x3, 0x0, 0x5, 0x55, 0x7f, 0x6, 0xff, 0x1, 0x7f, 0x1}, {0x30a6e690c10f9f24, 0x10000, 0xf, 0x0, 0x80, 0x2, 0x4, 0x81, 0x7f, 0xe1, 0x8, 0x8a}, {0xf000, 0x4, 0xc, 0x8, 0x0, 0x9, 0x4, 0x28, 0x0, 0x74, 0x4, 0x2}, {0x6000, 0x5000, 0xb, 0x6b, 0x40, 0x1f, 0x1, 0x1, 0xd3, 0x9, 0x7f, 0xfd}, {0xd000, 0x3000, 0x4, 0x3f, 0x8, 0x4, 0x81, 0x3f, 0x3, 0x8, 0x1, 0x81}, {0xf000, 0xd000, 0x9, 0x0, 0x7, 0x3, 0x2b, 0x1f, 0xd4, 0x0, 0x3, 0x5}, {0x0, 0x2000}, {0x105002, 0x4000}, 0x40000004, 0x0, 0x10000, 0xcbfd35e0acd6404c, 0xb, 0x800, 0x5000, [0x3, 0x20, 0x1, 0x5]}) [ 121.636587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.648395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.657510] audit: type=1400 audit(1572608957.730:39): avc: denied { create } for pid=6923 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 121.682004] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.688361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.696850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.704131] audit: type=1400 audit(1572608957.730:40): avc: denied { write } for pid=6923 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 121.728699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.737735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.744796] audit: type=1400 audit(1572608957.730:41): avc: denied { read } for pid=6923 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 121.774216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.777134] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.802409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.843629] device hsr_slave_0 entered promiscuous mode 11:49:17 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x6bce0c2704862240) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x7}], 0x10) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000010000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 121.871093] device hsr_slave_1 entered promiscuous mode [ 121.896938] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.900561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 121.904227] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.918421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.918830] F2FS-fs (loop5): Wrong SSA boundary, start(4096) end(5120) blocks(512) [ 121.934009] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 121.934564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.941696] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.953689] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.962226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.962357] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.976359] F2FS-fs (loop5): Wrong SSA boundary, start(4096) end(5120) blocks(512) [ 121.976783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.984203] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 121.995345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.006940] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.013330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.020330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.031794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.048505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.063334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 11:49:18 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x7fffcef2e1b2edca) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000380)=0x5f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0x8}}}, 0x90) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x3, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="56c001fa96c4754071b8f5e85e3aa23e6e67849f1bd3d89b3e9bfda83a2693692d7cdfe05d6d112771852e2545394cd70b80d003090d3d2aa3fd7b59e8a53156d600d94682f2c6a93ee72fee6e8a6875f695cd3385cd0e743d725b7eb8d54774abc4dbee2d63a29b55139f4244f7322ff0ef083650b77370c45b02e4376b486b178714e8895bc3456b4fc54c89ccf6cef096351362ccde0946192a14243e78894f939654319cc3b2eaa1a5cb261fef7e1e01000000144204ab14d6fdf3b1c81516fae6b91c6dc334ffe864ca1e365750619759e7333f20641da68a79756c4aafa81071c41af21f56ced3a0e4c7657d5cf029948db7dcd2654d8eacd5745924ad995e6f26584606c0d632e5baeeff2df9504dc394f54f671c3eb01b1a3371b1ba4142f8f9e2b777ae375f7a0002dec37d5522e25824ca5ebd9ccc8d5cd294d5cd5d122fa36aa2ed044ba1d12d2d7d2df1f175b66853ff0582befa009f56cef6ebf3ef83c545e7a0d6cf4b40658936b103f10a5cc4dc77eb85f6958ef026e483a7d1da617179208144cd0bf6b486497b65000000", 0x193}, {&(0x7f00000003c0)="7249c00b0b172653bb36d788575ffcbf49ac5d23c41b9c8427da2af57e7c05f0c6802d0e631a79436d2d6e78a4c27a6fbadcd92b884498cdf8be75fa0318d5b55e37c9cb4c634c3af4c0857b1ad0918312d013f82fa19ef2d860106a3b4e390561d01bffcd75a87d633e6e1445c1e6cb5b6e7e3591b602d6aad40a1cfa1d1db1f235a7fda172730ba450f37fd7fc14c570c47f14a99254565d712bb1ca81c6a56e3d0f14c04e", 0xa6}, {&(0x7f0000000200)="39ff48355e4c86a98b52cc32e7c7c7847df5877b2a1d886cdc25f267", 0x1c}, {&(0x7f0000000480)="5f1331f3e31866ec7b5cdde54cb63e2e40325603bafe0dac62a3d09f970f300a60c449deab45e066ad3c8f5858342097aeed219cce0225bd", 0x38}], 0x4, 0x0, 0x0, 0x4048000}, 0x44001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x31100000000000) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r2, r7, 0x7, r8, &(0x7f0000000340)={r3, r9, 0xf43}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) futex(&(0x7f00000004c0)=0x2, 0x85, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x2, 0x0) ftruncate(r10, 0x28007d) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r10, r10, 0x0, 0x2008000fffffffe) [ 122.070257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.077325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.086265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.095480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.114530] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 11:49:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x35) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000100)={{0x3, @addr=0x6}, 0x8, 0x4, 0x5}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0100285c48d1fa8c577deb00aa5300009650cc00631c67f810", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={r7}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000040)) ftruncate(r8, 0x3) [ 122.117373] devpts: called with bogus options [ 122.121407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.143199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.160933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.168539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.179394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.187483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.197778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.205391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.216837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.227476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 122.238385] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 122.269598] device nr0 entered promiscuous mode [ 122.275439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.282794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.289734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.297161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.306641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 122.320598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.328420] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 122.339110] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.360222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.367531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.377789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.386092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.397473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.407541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 122.421760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 122.428939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.440512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.447931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.455561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.466592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 122.475150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 122.484461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.496013] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 122.502463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.509349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 11:49:18 executing program 5: io_setup(0x6, &(0x7f0000000480)=0x0) io_getevents(r0, 0x6, 0x1, &(0x7f00000004c0)=[{}], &(0x7f0000000500)={0x77359400}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x400000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) recvfrom$rose(r3, &(0x7f0000000180)=""/235, 0xeb, 0x40000000, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000280)=0x2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}], 0x20) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000540)) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) [ 122.517572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.525415] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.531802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.532193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.546129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.555747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.574581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 122.588859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.602032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.609886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.617618] audit: type=1804 audit(1572608958.690:42): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir354896377/syzkaller.9wfGbV/5/bus" dev="sda1" ino=16522 res=1 [ 122.621795] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.650756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.658315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.665902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.682513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.696666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 122.706307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.718370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 11:49:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe54, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000002400070500000000000000000000ff00", @ANYBLOB="d33b86b32f11bb66fd7d7bb782bd41ce4108c3df8cb9a443ca783323ac64dde8c2207c8526c7fe38512da7fd13f8c72cd038c57c6e24b0b48f64f9c4f1a118cd89bb068a094714c55d9a0666ee8f4518497e16472848c5a54d93c86e0fe25b44e08f76f2900357153282f4838889160d5c458e58c719247bf602e9ec7db067a1c951db7451948a0e72d58942415c35ae4d91b7cf665ff7f41ecf08f0956987bcd064a38c", @ANYBLOB="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"], 0x3}}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) [ 122.732152] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 122.745446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.767498] 8021q: adding VLAN 0 to HW filter on device batadv0 11:49:18 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8001003, 0x7, 0x1}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4}, 0x90) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2000, 0x0) [ 122.803483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.822532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.830864] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 122.854389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.873459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.884624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.893043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.907996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.926051] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 122.937489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.947407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 11:49:19 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000003, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = dup2(r0, r1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000340)={0x2, 0x14, 0x90, 0xfff9, 0xe8, 0x8, &(0x7f0000000440)="b4f20ba5d9b6fc96e9b35bbea9c70fc108493341451d323fd5efaba752baabdfdf45dede1fb666b050b911e63b23bedfcc7096adbed310625a56a31e3fa69bbfea4d31c51265b107cb06db0c7a14604202c16cc198b9b7cac5cc9879ba3ae0084d83f91b72f842797c9c22de215e94201a6900151de32e2e1846094e63d6803631d70ac4e7ebcb98d875d682ca6c3700f246e10ead0faa1493231fdd55d992caf40bfaaa65ffe07d1ce6e63d1aab7292bb7a77e46a1bfedd89f0f9cdb91e5b1170a4376b608760fc0914b12f334e16b06df9ad9e2e9049f9749f3dfe3f1132f90b4c00c8c9d74d22"}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x4}, 0x4) r4 = socket(0xa, 0x3, 0xfc) getsockopt(r4, 0xff, 0x7, 0x0, &(0x7f0000000400)) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20080, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='syz0\x00', &(0x7f0000000140)='/dev/dlm_plock\x00', &(0x7f0000000180)='/dev/dlm_plock\x00', &(0x7f00000001c0)='(@-\x00', &(0x7f0000000200)='\'\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='/dev/dsp#\x00', &(0x7f00000002c0)='eth1>\x00']) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000040)={0x101, 'syz0\x00'}) [ 123.022554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.043877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 123.055995] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 123.077420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.091743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.099909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.107597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.127763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 123.138416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.149748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.159799] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 123.166670] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.173996] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 123.181031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.195199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.218576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.229664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.237792] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.244200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.267142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.286708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.295299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.305624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.313952] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.320379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.327828] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 123.335584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 123.347873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.375018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.383471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 123.390827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.404694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 123.412563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.421124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.428626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.439199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.446760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.454488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.465849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 123.473194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.480973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.490643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 123.497448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.505288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.514773] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 123.522890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.537220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 123.548445] 8021q: adding VLAN 0 to HW filter on device batadv0 11:49:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0xfffffffffffffcaa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="23ff1f0a8117fb62d5eb1b3c750c75c5533f018823a1699743876915922a9b66779e3db9e86d6e7f252fd10ebc78287e1d384bfe3042c4ba3c85075eab04ef2b1de023b3c35f0b8810707ed5dacca01048b2c20b884e0efb76d2659a715f3b513e33fd96c9d3c9afed9390ea148886982d2aae81947a0f311ec13cb357d0744ddc020aedf819000000000000000832000769dea9ed32487d2bf1acafcf98d817857774d2c00ae5ba0117d23beb40c4e69857745a81000000000000975500000000"], 0x3f2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x80000) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1018d, 0x11, 0x0, 0x27) 11:49:20 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0x1a9, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR, @ANYBLOB="000029bd7000fddbdf250a000000040006000c00070008000100033f000000000800030001000000080201001b000000080004006f00000008000400050000001c0007000c00040028540000000000000c0004000000000000000000300007000c000400ff00ffff0000000008000200050000000c00030000000000000000000c0003000101000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40e6b2a1fdac43d8}, 0x800) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0503000800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 124.195651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 124.248403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:49:20 executing program 4: pipe(&(0x7f00000006c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$RTC_VL_CLR(r0, 0x7014) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) r1 = socket(0x0, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)) listen(r2, 0x200000000002) syz_open_procfs(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) getgroups(0x1, &(0x7f0000000040)=[r7]) r8 = dup3(r3, r4, 0x0) dup2(r8, r5) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 11:49:20 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)="5970d87a1305af83", 0x8, r2}, 0x68) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x800, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000340)=r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xebe432e00a428354, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000012000507ca8500000000000000030000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x5}}, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) accept4$unix(r5, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0xbe1d37590be9965d) 11:49:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @identifier="a9011fb21314331a07ee720ce7c7d570"}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00\xb80x0]}, &(0x7f00000000c0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000200)={[{0x7fffffff, 0x1, 0x1, 0x5, 0x1, 0x0, 0x20, 0x9, 0xc0, 0x9, 0x0, 0x2, 0x101}, {0x401, 0xee6, 0x0, 0x4, 0x0, 0x2, 0x81, 0x9, 0xa8, 0x6, 0x40, 0xa4, 0x100}, {0x3, 0x9b7f, 0x1f, 0x2, 0x2, 0x4c, 0x7f, 0x2b, 0x2, 0x81, 0x8, 0x4}], 0x2}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x93, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x80000001, @ipv4={[], [], @multicast1}, 0x6}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r6, 0x80000000}, &(0x7f00000001c0)=0x8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) 11:49:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='.ocgroup.c\bu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpuacct.stat\x00\x01\xa0\xe4\x92\xd50\xb8\\\xf5\xde\x01\xb4\xdf\x06\xbd\xa6\x0e\xa0m\f:\xae\xadh\xd3\xa8\xf9\xa2s\xf9\xffl\x87\xbd\x8d\x05\xf1\xe64IX\xe2\xbe\xd7\x9b4,\x1a\x12\xec\xf9\xbf(\xc4\xc4x+J\x84b\xd0\xf2\x89\xad\xce\x9fM\xaf\x98P\"\xc8$\xb3W\xcf\xc9\xc0?1\x18\xde\x93\xc4)\xf7\a\xb8$J\x90\xf8\xdf\\\x00\xa2PBk/EJ\xcfO~VG4e\xf5\x0f\xc3\xd0\xf0\x87\xcc\xac\xb9\xd2M[c\x9e\xe8;X\x8d\x8f\x06=\x10\xf7p\xf4i\xaco+;}\xa8y\xc8\xc0N\xca\x1aZ\xa1\xe7\xf8\x14\xfd\"z\xba\t\x85\xb9\x93$B\xd5H4(FA\x92\x7f\x92\x1e\xf2\x18\xdc\xbb\x0f\xee{r\xc1\xd7\xc5Atf\x1f\xd2\xa4\xa0\x05\xdc\x84\x85D`\xc0\'\xf3\x8c\xfc;8i9\xe9\xa1\x00\xa4\f\xc5\xa4Me\x9e\x9e\r&\xed\x81\xb1M\x13\xc1)\xddG\t}\x11\xf3\aV\xf0O\x8b\xd9\x18\xbf0\x01\xd0\xe3\xba\xbd\xea\xdf\xf6\xd7k\xd0\xc0\xdco\xa7\xa1\xe8\x7f\x82\x90\xdf\xd5?\xef%^S\xe0\x93\r\x00w\x13\x0fe\xb7\xda\x9d\xe7C\r\xa6f*xd\xbd\xc8\xaf!\x1blZ\xd4\xb9\xf76j\xe9v\tM\x8aa,6\x1f\xcf\xe9\xf5\t\x7f\xd7\xd1O\xdf\xe8\x9c;\x93\x16\x97\xec\x03\xe3S\v\xe3\x11\xec\xa5kg\xf3\xb3s\xc0{wu\xa9\xdd\xefD\xc0j\f\xe5\x18\x84\x81\xa5~\xc7s\b\x04\xb8T\x00\xb4\x88u\x80!n\xd0\xb5\xd3>E:\x04\xb7\xcc\xa9\xa5\x96\x12!\x89\xe0\x82\x12e\xb3\x18\x12\xdcT\x1cRO}\xe7L|,s\x7f\x98\xd3A\x9bH;\xa0\xa6Q2\xd2%\n\xef8\x19\x1a9\x96\xa0\xc4\xb23\xeaJ\xc4\x91\x8dD8!M\x82\xae\xe5{\xcf\\/\x03\f\x8af/\xa6\n\xdd\\\xc7(\xc6\x8c\x03\v\x06\x89Q\xeb/', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x6) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) fcntl$dupfd(r2, 0x406, r3) getsockopt$inet6_int(r0, 0x29, 0xe1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xffffffff}, 0x8) 11:49:20 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_dev$cec(0x0, 0x2, 0x2) r6 = dup3(0xffffffffffffffff, r5, 0x0) write$selinux_load(r5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="8cff7cf90800000053452048696e7578698395d771139ef4c3e808000000000000005d3ba7eb5493d341776fd9f9c6ca3fe17a770b666c8b998ae75f162043f000e2511a1d0184a7bc8121e3392a041be2a987de0a1b71da0fb36fd7bf44e27656c5be2a739dba75ba485765ae833e5b1579af6ed3802a8201da3be2f601a5c5b202e03711fb5d5d4eaac946c58ae724aad79a4a8f40fe98f37799503440eb86ad92872e28593a9200b8fa4c7ccc070000000000000000000000000024dd7f2a146d466f0b0a11e16d422ca8e5fcdbe34bbfdd0df7457de24a7e93bfd15a6fcda353234ce8700f3be569da6f9e69ee9a0a371f15e102fdfaccbb6d0d766bfef0609968acff2d04a40f9c56a5b33c3fffc8c1877558d1391c3f0000000000"], 0x114) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x80, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x60, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x50, 0x2, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x6b}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x7}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e24}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x8}], @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="2000000011003b0e00"/20, @ANYRES32=r10, @ANYBLOB="0000757ef55a4db15464e5c4213adfb4f51eaf14db7fdc3cc8e7f9aa4f3ebcbe72e6c1631b2685ce68cb8157e46a2f9205d73dfdc38d57438fb715953bc3e4f863778f28e8ee3f218b44068113c2cfb6582c7a717e7f026c9fa08e3aaae1fc9c25b6c31953a7578f3881ec26c0d0e9deddfa9596668c6670b28d4c11551fdf0813b087c0d3869d991c548fd2372eef473795e6fb9df8c95e81e0ccda0b69eee90683ca688c230000"], 0x3}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x28d2}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@ipv6_getmulticast={0x0, 0x3a, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) r14 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r14, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa355", 0x3e4, 0xc001, 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000140)={0x4, "476374cc8f990e647f6af6c7d040a5a5f251df4da367e2f6f49921d8a109e821", 0x400, 0x9, 0x9a51, 0x10}) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r15, &(0x7f0000000080)=ANY=[@ANYBLOB="403ac181811d03314f4b41"], 0xb) fallocate(r15, 0x3, 0x0, 0x8020003) lseek(r15, 0x0, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4}, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r15, 0xc1105518, &(0x7f00000005c0)={{0x3, 0x6, 0x3, 0x7, 'syz0\x00', 0x7f}, 0x4, 0x200, 0x2, 0x0, 0xa, 0x6, 'syz1\x00', &(0x7f0000000380)=['\x00', '*\xd5lo', '\xdbkeyring\x00', '\v]\x00', '\x00', 'system,\x00', '}userself},\xa5*.eth0^\x00', '^&vmnet0vmnet0eth1eth0em0\x00', 'proc:+@\x00', '\x00'], 0x51, [], [0x401, 0x6, 0x0, 0x1f]}) io_submit(0x0, 0x0, &(0x7f0000000540)) [ 124.438747] QAT: Invalid ioctl [ 124.446973] QAT: Invalid ioctl 11:49:20 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) fallocate(r0, 0xe, 0x6, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x10, 0x0, 0x3, 0x0, 0x3f}) syz_open_pts(0xffffffffffffffff, 0x0) close(r4) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r5 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x14) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0xfe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x80000001) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r6, 0x0, 0x8000fffffffe) 11:49:20 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x40}, &(0x7f0000000380)=0x8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="77827cf354677d4e26f3b1", @ANYRES16=r3, @ANYBLOB="e54e000000000000000008000000180004001400010062726f6164634273742d6c"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r3, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x444}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x804, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)="07332dddc13e9928dbc3c2e194f4612185b3759b732073a8042e169f66abeb7bd884d984fa158df07801dfcd0519d83f548103d56e5c4ae29ee82af5aebe536a6968636fba5b2a845945c34d8929d59e5aa9649fb24f708211d36226a00fee65bf10a4cb5b2ba10b0c061159c3b9b531e4f6c5579861f481ed9aae949a45bdd8db84d97e8c4cfb4e47bad4fd3565146be3c28fbe202d99ef73e4bf4d9577496c892482919fca374f92a5876e6d5228db20a539cd2c67794dc6ae7311696ec8e952d8d32a4a83dd363a9a5807caf438bbe81bdd", 0xd3}], 0x1, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') [ 124.664731] audit: type=1400 audit(1572608960.730:43): avc: denied { create } for pid=7058 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 124.707745] hrtimer: interrupt took 43862 ns [ 124.855277] audit: type=1804 audit(1572608960.740:44): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir354896377/syzkaller.9wfGbV/10/bus" dev="sda1" ino=16552 res=1 11:49:21 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x0, r0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24000000180007351dfffd946f610500020000091f000007242808000800084004001000", 0x24}], 0x1}, 0x0) 11:49:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r2, r0) open(&(0x7f0000000040)='./bus\x00', 0x40141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000c}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) write$P9_RRENAME(r1, &(0x7f0000000180)={0xffffffffffffff46}, 0x5) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000140)) 11:49:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1d2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)=""/212, 0xd4}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/69, 0x45}], 0x4}, 0x80002) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="0f"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 124.904553] IPVS: ftp: loaded support on port[0] = 21 [ 124.958170] audit: type=1804 audit(1572608960.770:45): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir354896377/syzkaller.9wfGbV/10/bus" dev="sda1" ino=16552 res=1 11:49:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 11:49:21 executing program 5: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)=""/234, 0xea) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) 11:49:21 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000003c0)=@v2, 0x14, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file1/file0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0xf538de9fbfdc1fd7, 0x2a) accept4$bt_l2cap(r3, &(0x7f0000000040), &(0x7f00000001c0)=0xe, 0x143c8bd251ee2a94) exit_group(0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) 11:49:21 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000d4460000000700"/25, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x0) dup(0xffffffffffffffff) setxattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0xffffffffffffffcd, 0x2) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0xfffffff5, 0x3, 0x101, 0x748, 0x1, {0xfff, 0x5, 0x3, 0x491a, 0x7ff, 0x140, 0xe8, 0x1, 0x0, 0x7, 0x1000, 0x3, 0xb3, 0x3, "fdfb6cfa0550a42062cef5446e2f58284ac5fa7cbdab6dd0a4f686031c1f23cf"}}) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 11:49:21 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0d0040dc", 0x6}], 0x3, 0x0) 11:49:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000500ac14142603000e00050000000000812fa8000800a4000000e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x95, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0xd6, "3b5f2dbcdd8fb3eb86da080f4212cd6b91367fc50f987282be41f576c6658dfeae79cb30c0196d5a4114bf82d609f10566ea53904654e49b487cacbc6a523e2bc8fea62d266ad4b980ce61792c7b0be7e54bf0afb0301f1a040437df0f6b17bb159b72c9b65a6a769cb35753755b3eba3c38004f3a6844457ed239873be3d5cd54a7cd076f1472028c2f82ceb473d15f29e41e8f756714784a62a609edd5b6dbe20eb1e83a288fe8a60135cc787385ce16bdeb8aad32ed5e54493aaa923bfbc5c833da113c42b0cf092f60da1e9951e0f26f10de56c6"}, &(0x7f0000000340)=0xde) [ 125.374906] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 11:49:21 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x24080}, 0x8000) fcntl$setlease(r0, 0x400, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') dup2(r1, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000140)={{0xdb, 0x33}, 'port1\x00', 0x20, 0x100a, 0x800, 0x1, 0xbe23, 0x4, 0x6, 0x0, 0x3, 0x4}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000280)) 11:49:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x8001}}}, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) [ 125.458585] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 125.465450] overlayfs: filesystem on './file0' not supported as upperdir [ 125.467763] overlayfs: filesystem on './file0' not supported as upperdir [ 125.513400] IPVS: ftp: loaded support on port[0] = 21 [ 125.578482] audit: type=1804 audit(1572608961.650:46): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351307478/syzkaller.Gua8GX/4/file0" dev="sda1" ino=16559 res=1 [ 125.701964] audit: type=1804 audit(1572608961.690:47): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351307478/syzkaller.Gua8GX/4/file0" dev="sda1" ino=16559 res=1 11:49:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 11:49:22 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet6_dccp_int(r3, 0x21, 0x11, &(0x7f00000000c0)=0x10000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 11:49:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x100, {0xffffffe1, 0x8, 0x7, 0xa1, 0x1, 0x1}}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="cf", 0x2468d, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) 11:49:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) sysinfo(&(0x7f0000000180)=""/5) getdents(r1, &(0x7f00000001c0)=""/146, 0x92) connect(r1, &(0x7f00000000c0)=@isdn={0x22, 0x5, 0x40, 0xc9, 0x2}, 0x80) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000600)=ANY=[@ANYBLOB="ff0000000017b60300e97f000000000003007b0093135becf3da16d79259e59e54b2cbf26fa9da13d82ecb53c1f71829d500001000b89e74e13bdb334099ee1fd60c8bc2fbca3cbf9f520e43ff064dcd0df7f615d03da033773bbd1a1f6ac6c4e10733151a5380f7c8f55173eca37596be15332dc2532ca7a530e6fac1735a9831ee49c36e6ead7996e0503a9846183602cf32b073301844360c4f46d307ae1501a67b3d517c4146c852199c67f45d1dede4bfb9099a457ace9290f4f5a9f14fdf83b65caec26af88b3869ec0db076ee94792e29718264f1297af41e6dccd73e7bb200a2f5e6fded97366112dddf4b292bdd06c65161f77dc0169ee657d4114376adb9bf58505a20a324b63193148f15cb608037d212456036c9462cbf5dd912610bc44403885e72ce91f94cc17d87d64cde04ca2ba7263658116e4abe3e3edd3e8d3508bc5ff427629d2ee99782513c8ef8c987d8fd37586c041d403ac458a93c74f6431e050052694adb54894c0c126d14d173730ae3417073e8c5df9b11fda23a6701009527c46774c06b47df159ca1d59b872da1c9eac4b6e993f7eb979434dc2266b500"/431], 0x18) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xfffffffffffffde4) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000140)={0x3, 0x9, [0x9, 0x5, 0xce0, 0x7fff, 0x100], 0xff}) 11:49:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f00000000c0)={{0x3, 0x0, @reserved="e488715ef4f04e47afd7444ca91fbf2efb42a30e59c46bc744c2fc4e0ead2e6a"}}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req3={0x5, 0xce, 0x7, 0x1000, 0x9, 0x0, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 11:49:22 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000000)={0x0, "1075f387687a131880b1f90e623a4a9e4db13294f1f586b00af8738bb1b65fd5", 0x2, 0x400, 0x8, 0x9, 0x4, 0x1, 0x3, 0x2}) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x0, 0x12, r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, 0x0, 0x0) 11:49:22 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000200)={0x0, 0x2}) getpeername$tipc(r2, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0xc787000) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000001c0)={0x3, 0xfe, 0x1d}) ftruncate(r6, 0x10099b7) fallocate(r1, 0x4000000000000010, 0x7a9a, 0x7fff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="00b296ff538e700531ffe68f7627dcfc564917f91a08448ae7db0e3856bbd8b08afdc61c29fa0b6e8a58032e0f2f99b3ac2020daf4e1a45070e0bdc3327bf2c479cec7d4ed0901dd6876c4ba812d336241740b2fd0e6aa81002e7024fbd559fc9bd2c92dabddbd349bd079e32cbffd1cfb6b", 0x72, 0x200040a1, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) [ 126.376286] audit: type=1400 audit(1572608962.450:48): avc: denied { map } for pid=7150 comm="syz-executor.5" path=2F6D656D66643A0F0280052C04ADE5BAEDFA9C3A2129A10C669AEA7A6FF10942D9605F052C67104B53579251CB6FDF4A7CE29B632F13932D08483DF3D1B6D938F5C9F4F8A543698CC6852837DC122C08CA886938380A7B48E97F5BEA275C0668C914761420EF12E5A93E1E225C9F401EC1EE314A4AA8B21509BE749092202864656C6574656429 dev="tmpfs" ino=26341 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 11:49:22 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) 11:49:22 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) preadv(r0, &(0x7f00000038c0)=[{&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/96, 0x60}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x7, 0xfffffffffffffffc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enorce\x00', 0x320, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000d4460000000700"/25, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r4, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0xc754202a2829b674, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='.//ile0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) write$P9_RSTATu(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="5b1000007d020000ac42000700fdffffff0301000000030000e00000000000002000970000000700000008000000000000000400746c7300000000000b002f6465762fef93892e2f3829e0746c7300", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9], 0x5b) dup(0xffffffffffffffff) setxattr(0x0, &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0x0, 0x2) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') 11:49:22 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0xa8d7, &(0x7f0000000000)=0x4) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x3, r1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000040)={'trans=tcp,', {'port'}, 0x2c, {[{@privport='privport'}]}}) 11:49:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)={0x4, 0x5, [{0x2f, 0x0, 0x1}, {0x1, 0x0, 0x7}, {0x4, 0x0, 0x7fffffff}, {0xfff, 0x0, 0x7}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1) [ 126.726990] 9pnet: p9_fd_create_tcp (7183): problem connecting socket to 127.0.0.1 [ 126.742966] audit: type=1400 audit(1572608962.510:49): avc: denied { map } for pid=7150 comm="syz-executor.5" path="socket:[26345]" dev="sockfs" ino=26345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 11:49:22 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) preadv(r0, &(0x7f00000038c0)=[{&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/96, 0x60}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x7, 0xfffffffffffffffc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enorce\x00', 0x320, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000d4460000000700"/25, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r4, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0xc754202a2829b674, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='.//ile0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) write$P9_RSTATu(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="5b1000007d020000ac42000700fdffffff0301000000030000e00000000000002000970000000700000008000000000000000400746c7300000000000b002f6465762fef93892e2f3829e0746c7300", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9], 0x5b) dup(0xffffffffffffffff) setxattr(0x0, &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0x0, 0x2) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') [ 126.781782] 9pnet: p9_fd_create_tcp (7186): problem connecting socket to 127.0.0.1 [ 127.006191] audit: type=1326 audit(1572608962.550:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7151 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45cd8a code=0x7ffc0000 11:49:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:49:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) r7 = socket$pppoe(0x18, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x100}, {r3, 0x4000}, {r4, 0x102}, {0xffffffffffffffff, 0x6}, {r5, 0x90}, {r0, 0x100}, {r6, 0x181}, {r7, 0x100}], 0x8, &(0x7f0000000280)={r8, r9+30000000}, &(0x7f00000002c0)={0x5}, 0x8) r10 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000000080)={'sit0\x00', 0xe2a}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x80, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x1, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f0000000140)) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:49:23 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) preadv(r0, &(0x7f00000038c0)=[{&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/96, 0x60}, {&(0x7f0000000780)=""/60, 0x3c}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x7, 0xfffffffffffffffc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enorce\x00', 0x320, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000d4460000000700"/25, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r4, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0xc754202a2829b674, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='.//ile0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003940)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r9, 0x0) write$P9_RSTATu(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="5b1000007d020000ac42000700fdffffff0301000000030000e00000000000002000970000000700000008000000000000000400746c7300000000000b002f6465762fef93892e2f3829e0746c7300", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9], 0x5b) dup(0xffffffffffffffff) setxattr(0x0, &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0x0, 0x2) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') 11:49:23 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00002d6000/0x6000)=nil) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0xfe30d4abfc199617) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) [ 127.187989] audit: type=1326 audit(1572608962.550:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7151 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459f49 code=0x7ffc0000 11:49:23 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x3ad) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x4) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) 11:49:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @rand_addr, 0x5bd}, 0x180) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) r3 = dup(r2) listen(r3, 0xfffffffd) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) stat(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) stat(0x0, 0x0) 11:49:23 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x6, &(0x7f0000000180)=0x1) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 11:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xb6c}}], 0x34, 0xac0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = fcntl$dupfd(r1, 0xe09, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 11:49:23 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xca, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x550e}, 0x0, 0x0, 0x0, 0xf, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffb}, 0x0) sendto$inet6(r5, &(0x7f00000009c0)="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", 0x3e6, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000000), 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r7, r6, 0x0, 0x80000005) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100), 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr="00000000046212ee3200"}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x0, 0x0) eventfd(0x1476c0b9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x424000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r11, 0x0, r10, 0x0, 0x1000000000000003, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000040), 0x1c) io_setup(0x207, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x1}]) 11:49:23 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x1000, 0x7, 0x10, 0x3, 0xfa54, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) unshare(0x20600) 11:49:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000002440)=[{&(0x7f0000001400)="95bb05a1e9906a97c2025bad53887850c352cc2e4c5018271792d75b8e47536847b3c74ce3ee298d2df4ec0c2924e8fa8e8cc709c2ea8212c193a66c70c43105b11bb3dcd7fd29e9eabf9700a3978f095fb51105a32234a214bf7ab54bffd2a263641c4bd1c5729572a4b1536445", 0x6e, 0x168}]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10d000, 0x0) alarm(0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @rand_addr="28b32f73ee4c0d833f3df9f3193be4e3", @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x81, 0x0, 0x63acb1259965a90, 0x0, 0x100, r2}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x400) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x17}, r1}, 0x14) [ 127.636359] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 11:49:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x136, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x7fff, 0xffff8001, 0x0, {0x9, @vbi={0x6d7, 0x80000000, 0x8, 0x31424752, [0x101, 0x6], [0x1, 0x3], 0x1}}}) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x200080, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000240)) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000400)=0x400, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 127.776457] Dev loop3: unable to read RDB block 1 [ 127.847974] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=7260 comm=syz-executor.5 [ 127.853079] loop3: AHDI p2 11:49:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000500)="c5", 0x1}, {&(0x7f0000000080)='8', 0x100000}], 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 11:49:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 128.005140] loop3: partition table partially beyond EOD, truncated 11:49:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) pipe(0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x10080, 0x0) mq_timedsend(r1, &(0x7f00000001c0)="fa85434d368bfb3e31bb5b7ddd4d5690b0ad38f89ea9d43022dd474c0a4196abccfeb1b2b318b9c4a60252db01e1e9e243f84195f3ade07b822f749c4e24fa8b9aa9be5f6e42fdec62758b9455787ad1140b1977a00d01a5c8def38da64d316acabd91018992685ca12f89ed6ede12eb281fe2e4a6a283b7edb5ce332b742a34158e9dbc61b7248bb70fa65a56c04bfa28417f511d50fed81ea85a2731cadc0a6a6fa41309625bf098a66837af6bfad39c8d9e31decf58c512595304f7e21501438133", 0xc3, 0xffffffffffffffc0, &(0x7f0000000140)={0x77359400}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) r4 = gettid() r5 = accept4$tipc(r1, &(0x7f00000002c0)=@name, &(0x7f0000000300)=0x10, 0x80000) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000180)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000001880)=""/4096, 0x7ffff000}], 0x1, 0x0) 11:49:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x42241, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000140)) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x60000) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$get_persistent(0x16, r5, 0xfffffffffffffff8) ioctl$RTC_PIE_ON(r3, 0x7005) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffff0d3, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x2) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x5, 0x2, 0x3}) [ 128.121508] Dev loop3: unable to read RDB block 1 [ 128.126580] loop3: AHDI p2 [ 128.147882] loop3: partition table partially beyond EOD, truncated 11:49:24 executing program 3: epoll_create1(0x0) epoll_create1(0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x978784773fe4d387, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@loopback, 0x4e23, 0xbc9f, 0x4e22, 0x0, 0x8, 0x0, 0x20, 0xa7, r1, 0xffffffffffffffff}, {0x200, 0x108, 0x7, 0x9, 0x7, 0x5891, 0x8, 0x10001}, {0x0, 0x7, 0x1, 0x92f2}, 0x7, 0x6e6bb4, 0x5, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d4}, 0xa, @in=@loopback, 0x3501, 0x4, 0x3, 0xfe, 0x3, 0x8000, 0x10001}}, 0xe8) r2 = inotify_init() pipe(&(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r3, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1) 11:49:24 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) r3 = dup2(r1, r0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{0x3000, 0x1, 0x0, 0x9, 0x22, 0x7, 0x20, 0x26, 0xcc, 0xbe, 0x8, 0xcd}, {0x11e001, 0x100000, 0xe, 0x8e, 0x0, 0x1f, 0x9, 0x40, 0x66, 0x6, 0x7f}, {0x2, 0x2000, 0xd, 0x9, 0x3, 0x1, 0xf8, 0x1, 0x3, 0xe7, 0x0, 0x28}, {0x4802, 0x1, 0x8b44c0a3ec6b3dfd, 0x80, 0x2, 0x0, 0x3, 0x9, 0x1, 0x5f, 0xb8, 0x2e}, {0x1, 0x18004, 0xf, 0x6c, 0x5, 0x7f, 0x3, 0x3f, 0x9, 0x3, 0xff, 0x4}, {0x3000, 0x5eee95b0d8a2eb2a, 0x0, 0x3, 0xff, 0x8, 0x96, 0xa7, 0x40, 0x0, 0xd0, 0x8}, {0x4803, 0x0, 0x8, 0x4, 0x1f, 0x40, 0x1, 0x7d, 0x7f, 0x31, 0x9, 0x6}, {0x0, 0xf000, 0x3, 0x40, 0x3, 0x20, 0x0, 0x7, 0xe7, 0x3f, 0x6, 0x4}, {0x100000, 0x5000}, {0x3000, 0xb0385e6c09736989}, 0x40000, 0x0, 0x6000, 0x480, 0x1, 0xc000, 0x3b5f17eaed522f05, [0x7, 0x2, 0x0, 0x28000]}) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000140)=0x2) 11:49:24 executing program 3: socket$vsock_dgram(0x28, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3be37ab5fabcc5aa, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6c1d1f63703433ff0100028f3d61736369692c00"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0xffff, 0x1f, 0x0, 0x8}, 0x6) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r4, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x5c, {"d6c2c484de308baf83562f4a24d87a86"}, 0x3, 0x7fffffff, 0x3}, @ib={0x1b, 0x5, 0x0, {"4494f8fe8212bb30b5f47f549891c942"}, 0x401, 0x4000000, 0xab8}}}, 0x118) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:49:24 executing program 1: socket$unix(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="2260b73c4c2df6852509cb541fab3a5a029a411b7c7dc2cee274b7dbd0ae4a4dd75af27c1cd0d2d2e394f62996305da87d123192b13a5d660d39d003757f83e859de819853575c76c693354170a925528bf6a0869a367e99872d0d2661150d63c0f229e27c1c3682116c8b967279d4467c3dce8dddbdc58ae465aab99629df73c686be70800c79c22c9f10190bcde5559fd504c913c9e52f7fa1cdf8e3a7b87c6367360fd7cca3de7fc1817665845628eab73aa7216031813efe98b7a1feca37e4f15792042d7f7535b91e4812d385c6042aa4009a903a3f707b7c513594b040fcfe0a95f10d8c2235f2") r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/65) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000200)={{0x3, 0x33}, 'port1\x00', 0xc9, 0x40228, 0x46, 0x0, 0xfffffffb, 0x100101, 0x71d, 0x0, 0x4, 0xfffffa30}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x3, 0x81, 0x5, 0x6}]}) 11:49:26 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xca, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x550e}, 0x0, 0x0, 0x0, 0xf, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffb}, 0x0) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377", 0x3e6, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000000), 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r7, r6, 0x0, 0x80000005) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100), 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr="00000000046212ee3200"}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x0, 0x0) eventfd(0x1476c0b9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x424000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r11, 0x0, r10, 0x0, 0x1000000000000003, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000040), 0x1c) io_setup(0x207, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x1}]) 11:49:26 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0xcc}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x16, r5, 0x1, 0x2}, 0x14) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b8}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) fallocate(r0, 0x4000000000000010, 0x2, 0x7fff) 11:49:26 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x1f3, &(0x7f00000005c0), 0x40000, &(0x7f00000006c0)='ppp1\x00') symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x0) dup(0xffffffffffffffff) setxattr(0x0, &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 11:49:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x400, 0x100) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x44f, 0x0}, 0x80000001}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x2e8cad2, 0x0, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x9, 0x20, 0x0, "98866f0e"}, 0x0, 0x25c59b6219f361aa, @fd, 0x4}) 11:49:26 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) 11:49:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) sendmsg$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5437, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x9c0000, 0x5, 0x25, [], &(0x7f0000000080)={0x990a93, 0xfffff69f, [], @string=&(0x7f0000000040)=0x8}}) [ 130.764561] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 11:49:27 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xca, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x550e}, 0x0, 0x0, 0x0, 0xf, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffb}, 0x0) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377", 0x3e6, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000000), 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r7, r6, 0x0, 0x80000005) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100), 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr="00000000046212ee3200"}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x0, 0x0) eventfd(0x1476c0b9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x424000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r11, 0x0, r10, 0x0, 0x1000000000000003, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000040), 0x1c) io_setup(0x207, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x1}]) 11:49:27 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000001c0)=0x7fffffff, 0x4) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000280)=""/54, &(0x7f00000003c0)=0x36) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowErdir=.:file0,workdir=./file1']) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x2000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) socket$inet6(0xa, 0x80003, 0x9) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') pipe(0x0) socket$netlink(0x10, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000000c0)=0x7fffffff, 0x8) 11:49:27 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r0, r1, 0x17, 0xc58a2c5cded2f440}, 0x1000002f5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x46, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) r4 = getuid() mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x7d9e04bfb7c109e4, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@posixacl='posixacl'}, {@cachetag={'cachetag', 0x3d, '/selinux/enforce\x00'}}, {@access_uid={'access', 0x3d, r3}}, {@cache_mmap='cache=mmap'}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@afid={'afid', 0x3d, 0x20}}], [{@subj_user={'subj_user', 0x3d, '/selinux/enforce\x00'}}, {@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, 'useruser\\'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) [ 130.963427] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=7353 comm=syz-executor.5 11:49:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x2102, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = dup(r0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) accept4$unix(r4, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0xcd9eac2933a37471) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) 11:49:27 executing program 3: syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="8d40420d297dffffffffffff86dd02000000000000000000000000000000aafe8000000071000000000000000000aa0420655800000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000061ffffffffffffff00655800"/124], 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0xffffe8da) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) [ 131.075232] overlayfs: filesystem on './file0' not supported as upperdir 11:49:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 11:49:27 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB], 0x2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, 0x0}, 0x0) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x1f3, &(0x7f00000005c0), 0x40000, &(0x7f00000006c0)='ppp1\x00') symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x0) dup(0xffffffffffffffff) setxattr(0x0, &(0x7f00000004c0)=@known='system.advise\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 131.221164] overlayfs: unrecognized mount option "lowErdir=.:file0" or missing value [ 131.270087] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=7380 comm=syz-executor.5 11:49:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 11:49:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xce7b9e13091d2304, 0x0, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1002) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000000c0)={0x0, 0x5, 0x5, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) accept$alg(r2, 0x0, 0x0) lseek(r1, 0x0, 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) sendfile(r0, r4, 0x0, 0x1000000040f09) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x404a4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x32, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) 11:49:27 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xca, 0x2, 0x0, 0x0, 0x5, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x550e}, 0x0, 0x0, 0x0, 0xf, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffb}, 0x0) sendto$inet6(r5, &(0x7f00000009c0)="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", 0x3e6, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000000), 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r7, r6, 0x0, 0x80000005) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100), 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr="00000000046212ee3200"}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r9, 0x0, r8, 0x0, 0x0, 0x0) eventfd(0x1476c0b9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x424000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r11, 0x0, r10, 0x0, 0x1000000000000003, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000001, &(0x7f0000000040), 0x1c) io_setup(0x207, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x1}]) [ 131.369655] kauditd_printk_skb: 51 callbacks suppressed [ 131.369663] audit: type=1400 audit(1572608967.440:103): avc: denied { create } for pid=7384 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:49:27 executing program 3: syz_emit_ethernet(0xcb, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x400000000000031f, 0x4, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x7, 0x1, 0x0, @remote={0xac, 0x70}, @remote, {[@noop, @end, @lsrr={0x83, 0x13, 0xff, [@multicast2, @remote, @multicast2, @multicast1]}]}}, @icmp=@dest_unreach={0x3, 0xb, 0x0, 0x0, 0x8, 0x9, {0x22, 0x4, 0x0, 0x3b, 0x6, 0x65, 0x7731, 0x1, 0x62, 0x4, @rand_addr=0x2, @remote, {[@generic={0x0, 0x9, "e4ee9b0ab0ac76"}, @lsrr={0x83, 0xf, 0x6, [@multicast1, @local, @multicast2]}, @lsrr={0x83, 0xf, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @local]}, @rr={0x7, 0x17, 0x2, [@empty, @dev={0xac, 0x14, 0x14, 0x29}, @empty, @multicast2, @loopback]}, @ssrr={0x89, 0x13, 0x9, [@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}]}, @ra={0x94, 0x6, 0x6329}, @ssrr={0x89, 0x1b, 0xf5, [@remote, @broadcast, @rand_addr, @multicast2, @remote, @multicast2]}, @noop]}}, "15"}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ff0000/0xf000)=nil, 0xf000}, &(0x7f00000000c0)=0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000300)=0x1f) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', r3}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r5, @empty, @broadcast}, 0xc) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r7, &(0x7f0000000340)="a62d7a822dbc9448e8f7c1ff5df8faf78e87ad35e9885f4c78a43b186d6800596282dc873e3252b78dfc0d4fb2fb7947eb04805cf7d81f4b3e23a2c14f1f3d583343"}, 0x20) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) fcntl$getown(r6, 0x9) [ 131.477705] bond0: Releasing backup interface bond_slave_1 [ 131.512481] audit: type=1804 audit(1572608967.500:104): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir336909459/syzkaller.J0yMuY/13/bus" dev="sda1" ino=16647 res=1 [ 131.542905] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.550060] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.570601] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.585350] audit: type=1804 audit(1572608967.510:105): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir336909459/syzkaller.J0yMuY/13/bus" dev="sda1" ino=16647 res=1 [ 131.631689] overlayfs: unrecognized mount option "lowErdir=.:file0" or missing value [ 131.657458] bond0: Releasing backup interface bond_slave_1 [ 131.663681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=7410 comm=syz-executor.5 11:49:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x1f) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x90c40, 0x0) fsetxattr(r4, &(0x7f0000000180)=@random={'os2.', '\x00'}, &(0x7f00000001c0), 0x0, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1, @local}, 0x235) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 11:49:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x42000) ioctl$TCFLSH(r0, 0x540b, 0x0) 11:49:27 executing program 1: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000300), 0x24, 0x0) mkdir(&(0x7f0000000080)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040)='overlay\x00', 0x8000, &(0x7f0000000100)={[{@xino_auto='xino=auto'}]}) [ 131.803892] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.811300] audit: type=1400 audit(1572608967.540:106): avc: denied { ioctl } for pid=7384 comm="syz-executor.4" path="socket:[27414]" dev="sockfs" ino=27414 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:49:27 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) perf_event_open$cgroup(&(0x7f0000000780)={0x4, 0x70, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x40, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2df7, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0xd62, 0xc3621a75a63562e9, 0x5, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x2b, @local, 0x4e21, 0x3, 'sh\x00', 0x1a, 0x4, 0x74}, 0x2c) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x8c, r4, 0x504, 0x70bd29, 0x25dfdbfc, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400a000}, 0x40) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x465, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x3) 11:49:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) eventfd2(0x0, 0x0) r2 = inotify_init() sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x792}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x94b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008090) r3 = inotify_add_watch(r2, &(0x7f00000001c0)='.\x00', 0x80) inotify_rm_watch(r2, r3) r4 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r5 = dup(r4) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000240)="a4", 0x1}]) 11:49:28 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) close(r1) r2 = socket(0x11, 0x2, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x7ff}, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 11:49:28 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) alarm(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14, 0x100000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000008c0)={@ipv4={[], [], @empty}, 0xa, r4}) socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0xfe34) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x1, @random="0e11189ee15a"}, {&(0x7f0000000640)=""/51, 0x33}, &(0x7f0000000680), 0x2}, 0xa0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000040)="cee3f87af8f97b1d9a7a34502d6a611a530000002a0d614fda67dd2705e05b6e936df2", 0x0, 0xf000, 0x0, 0x29, 0x0, &(0x7f0000000180)="5fa9dd69a821774ab0b30a771297c971af242a2a9b0c12f05a26f665bd237f536fd555e342738db819", 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x7b, 0x1c3, &(0x7f0000000040)="cee3f87af8f97b1d9a7a34502d6a611a530000002a0d614fda67dd2705e05b6e936df2", 0x0, 0xf000, 0x0, 0x0, 0xc2, &(0x7f0000000180)="5fa9dd69a821774ab0b30a771297c971af242a2a9b0c12f05a26f665bd237f536fd555e342738db819"}, 0x28) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYPTR], &(0x7f0000000380)=0x1) r5 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082) ioctl$KDSKBSENT(r5, 0x4b49, 0x0) 11:49:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x440, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)="516bb77ca5bc0d3750c6ac68986a074509e69b9ed9df7681ad79aaff472670e67a4574be0e0ebc32d23f8710914f459f2c961e3193a3", 0x662321553679f57f, 0x2004014, 0x0, 0x14) shutdown(r0, 0x1) [ 131.977564] overlayfs: unrecognized mount option "xino=auto" or missing value 11:49:28 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file1\x00', 0x400, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x5, r1, 0x204189ef) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x1) [ 132.035589] overlayfs: unrecognized mount option "xino=auto" or missing value 11:49:28 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000440)=0x80) prctl$PR_SET_FPEMU(0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000380)=0x4) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1, &(0x7f0000000e80)=""/205, 0xcd}}], 0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x8001, @ipv4={[], [], @multicast2}, 0x8000}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) close(r6) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000480)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) 11:49:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) unshare(0x20600) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 132.230386] protocol 88fb is buggy, dev hsr_slave_0 [ 132.235707] protocol 88fb is buggy, dev hsr_slave_1 11:49:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x2000000000000004, &(0x7f00000002c0)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$inet(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) rt_tgsigqueueinfo(r2, r2, 0x33, 0x0) ptrace$getsig(0x18, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1cb8c60aff17c88, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x3) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000240), 0x4) fcntl$getown(r3, 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:49:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x1, 0xffffffff, 0xfb53, 0x6, 0x401, 0x7}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000640)={"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"}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x6026bb806d15d47c, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/107, &(0x7f00000001c0)=0x6b) umount2(&(0x7f0000000580)='./file0\x00', 0x9) 11:49:28 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/\x00\x00!<{HA\x8fo#\x00', 0xd, 0x9bfa1c54b278d073) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r12, 0x0, 0x0) r13 = getpgrp(0x0) waitid(0x0, r13, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r13, 0x9, &(0x7f00000001c0)=""/68) r14 = getpgid(r13) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000000)=0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = inotify_init1(0x0) r21 = gettid() fcntl$setown(r20, 0x8, r21) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r24 = gettid() waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r25 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r25, 0x29, 0x17, 0x0, 0x0) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="610ebbb181255593412f4c3b1a317bb8407e7e8a3f6131a0c43deb926086bb83604858163ca9298578f27a42a55fbc78e1a6897c795a4929f2d75d718228d38156", @ANYRES32=r25, @ANYRESOCT, @ANYBLOB="9633810741b09808cced8211681d8428b1c9a3f6d724d93ac77b4461c381214c29391edeea9bf56366cb93", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r14, @ANYBLOB="e927bb24ca8eb5f3b8de24c07c490008019c829723efb6e1ce7de88dec75ba73e4b4415747db27c39d39d08db5563b83b1b615edbfa45cb75b4231b93bfb4c38252d6f01587266a202c88cd178d37252a325f74b50859f63dfcf7c2d24fca664e512feaa0c09ba64b65e1bb01487d88225156ca6bea4f2f74e26bef4e57b238c96cdaecec02b68ea34888feceb3e39dd8bb6fa971d1fce24c71c033bc272ba60817febe37fea40410838e47e52c77541fbd6f1daa3287bb245c97a81a6080de1ed7fb159a85b2b4202ea6850b98a79c73819737d28d3a2c3e73f61c32eac182d29b82ee95b2b", @ANYBLOB="0f0a1dda840c4787a032b0328256142f18935f21be6121df396f262a4dd50000000001000000c4a70f1c92cd6273854303ca7bca8c1f420f7c0be15c588c784d695688c1e56246a0e8749bf1f7f1b1adda393056"], @ANYBLOB="c1f58918306ba110fd022f818375a59e14387c1acbecba85386f1bf9227edfd918b813c24991b2f04b43a53142c927228e6fca18a54fc5fce088ef42c5c08b2e1cd4fef5e471385780390b3f90bb0e5ba1278373b13a374246cd03a320ba5738434f9e225cfecc2bf1cf0374", @ANYRESHEX], 0x76d4447cb925a2dc}}, 0x20004850) r26 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r27 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r28 = dup2(r27, r26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r28, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r28, 0xc08c5334, &(0x7f0000000200)) r29 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r29) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r29}, 0x0) kcmp(r29, r29, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r29, 0x0, 0x0) r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r29, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r28, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, r15, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r14, r12, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r7, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x9, &(0x7f0000000000)='vboxnet0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x1, {0x0, 0xfffffffd}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) 11:49:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x39b) setresuid(0x0, r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0xa4, 0x20, 0x4, 0x70bd2b, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x1, 0x7f, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0xdf}, @FRA_SRC={0x14, 0x2, @rand_addr="ff36d9c275c81d77518597010fb99ae1"}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fff}, @FRA_SRC={0x14, 0x2, @local}]}, 0xa4}}, 0x0) [ 132.427930] bridge0: port 3(gretap0) entered blocking state [ 132.437029] bridge0: port 3(gretap0) entered disabled state 11:49:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0xea, 0x3f}, &(0x7f0000000340)={'enc=', 'raw', ' hash=', {'tgr160-generic\x00'}}, &(0x7f00000003c0)="e69e4f82e9e7cbf379ff5c826cd5ca69e5a90907d01647ca29fe1967584164eebc02563d2745ee718f5e5419defdf288238199a80db5443e890009c9c7f18c6e9e09db7272b031db50365c6eb080e72431f3c0b5ec99a4700e00c97b82da9ea26506cd980549e14b1ed61318859816604cd24f36e5d111a18c9d170c1d4eff0fd33b1e3c0ac5077142299eeb60a8320fb579dfdd51e5f4a6e783db8d8bb2dfdca58606c2f28d6f04e379e5772f80d157682713e93074ae5c13b639e5d37568a8e112fd95b2f00aa62a841bb48551a0932a2b715b975ba77677d5a6d663691c83f03cd508ef202572afb8", &(0x7f00000004c0)=""/63) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000002c0)=@nat={'na%\x00', 0x19, 0x1, 0x1e0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000ea00000000000000000200000000000000e2ccbeab2700000000000000000000000000ffffffff01000000050000002000000088e779616d3000000000e5ffffffffffffff00657464657673696d3000000000000065727370616e300000000000000000006e657464657673696d30000000000000aaaaaaaaaaaaff00ff00ffffaaaaaaaaaa1aff0000f3fffe0000e8000000e8000000200100007265616c6d000000000000000000000000000000000000000000000000000000100000000000000001000000bc0000008000b6000000000064657667726f757000b90000000000000000000000000000000000000000000018000000fbffffff0d00000006000000a2001700300d00000800000000000000736e6174000000000400000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff00000008"]}, 0x258) 11:49:28 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 11:49:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) shmget(0x2, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) read$rfkill(r2, &(0x7f0000000000), 0x9a) ioctl$int_in(r2, 0x8000008004500b, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) close(r4) r5 = socket(0x11, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000100)={r6, 0x86, "06cb0ebf843ab01dc9d6192027a4ae27d4c4eea157273baeebdb660bc8be58acfb6b54dd31c525d0a16fd9f943faa5a98e1ddc436c03f0083db5bf97f57e8315d651712085edaef073cd74f698de1bd5c402061ef5f13360b3883da902c925cb391e1500c5f97f07d96b1ae50db9ccada0b5e4978d0e04ab1301f7b7f39a470397c9eaab6c63"}, &(0x7f0000000080)=0x8e) [ 132.618356] device gretap0 entered promiscuous mode [ 132.651275] x_tables: eb_tables: snat target: only valid in nat table, not na% [ 132.658583] bridge0: port 3(gretap0) entered blocking state [ 132.664771] bridge0: port 3(gretap0) entered forwarding state 11:49:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) timer_gettime(0x0, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb074d782b99a4ebb28bd49ca9d8f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefd6c32891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000", 0xc9}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0xfffffffffffffde0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f00000001c0)=""/108, 0xfdb8}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x16b) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x80180) [ 132.714976] x_tables: eb_tables: snat target: only valid in nat table, not na% 11:49:28 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/\x00\x00!<{HA\x8fo#\x00', 0xd, 0x9bfa1c54b278d073) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r12, 0x0, 0x0) r13 = getpgrp(0x0) waitid(0x0, r13, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r13, 0x9, &(0x7f00000001c0)=""/68) r14 = getpgid(r13) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000000)=0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = inotify_init1(0x0) r21 = gettid() fcntl$setown(r20, 0x8, r21) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r24 = gettid() waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r25 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r25, 0x29, 0x17, 0x0, 0x0) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="610ebbb181255593412f4c3b1a317bb8407e7e8a3f6131a0c43deb926086bb83604858163ca9298578f27a42a55fbc78e1a6897c795a4929f2d75d718228d38156", @ANYRES32=r25, @ANYRESOCT, @ANYBLOB="9633810741b09808cced8211681d8428b1c9a3f6d724d93ac77b4461c381214c29391edeea9bf56366cb93", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r14, @ANYBLOB="e927bb24ca8eb5f3b8de24c07c490008019c829723efb6e1ce7de88dec75ba73e4b4415747db27c39d39d08db5563b83b1b615edbfa45cb75b4231b93bfb4c38252d6f01587266a202c88cd178d37252a325f74b50859f63dfcf7c2d24fca664e512feaa0c09ba64b65e1bb01487d88225156ca6bea4f2f74e26bef4e57b238c96cdaecec02b68ea34888feceb3e39dd8bb6fa971d1fce24c71c033bc272ba60817febe37fea40410838e47e52c77541fbd6f1daa3287bb245c97a81a6080de1ed7fb159a85b2b4202ea6850b98a79c73819737d28d3a2c3e73f61c32eac182d29b82ee95b2b", @ANYBLOB="0f0a1dda840c4787a032b0328256142f18935f21be6121df396f262a4dd50000000001000000c4a70f1c92cd6273854303ca7bca8c1f420f7c0be15c588c784d695688c1e56246a0e8749bf1f7f1b1adda393056"], @ANYBLOB="c1f58918306ba110fd022f818375a59e14387c1acbecba85386f1bf9227edfd918b813c24991b2f04b43a53142c927228e6fca18a54fc5fce088ef42c5c08b2e1cd4fef5e471385780390b3f90bb0e5ba1278373b13a374246cd03a320ba5738434f9e225cfecc2bf1cf0374", @ANYRESHEX], 0x76d4447cb925a2dc}}, 0x20004850) r26 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r27 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r28 = dup2(r27, r26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r28, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r28, 0xc08c5334, &(0x7f0000000200)) r29 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r29) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r29}, 0x0) kcmp(r29, r29, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r29, 0x0, 0x0) r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r29, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r28, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, r15, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r14, r12, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r7, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x9, &(0x7f0000000000)='vboxnet0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x1, {0x0, 0xfffffffd}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) 11:49:28 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RSTAT(r3, &(0x7f0000000080)=ANY=[@ANYPTR], 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast1, 0x9}, 0x1c) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f0000000300)="c814dce527c2839215fb565fd6c281ee0c2de1dd2e6aa7b176272c4cb63c41998fab9cc8f803b6f8192e775a8453271a75576179931164f098b6271085e440921fdece30150e234ca4e64ef98d8a4f0b3d1e4ef138db7b6349e1aaa7710c063ee055a27dda6246133b051f016aa2a93874c770aa84d82eeea3fe8e5a65d7953561277157b4278d20e321d7dfc4db29e2dacf41163c9816ce89c59bcb97c7e64dfccc62d2f3600caf42728840944bb89b250763b1dd9b8444a9", 0xb9) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6, 0x0, 0x2, 0x5897]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/\x00\x00!<{HA\x8fo#\x00', 0xd, 0x9bfa1c54b278d073) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r12, 0x0, 0x0) r13 = getpgrp(0x0) waitid(0x0, r13, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r13, 0x9, &(0x7f00000001c0)=""/68) r14 = getpgid(r13) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000000)=0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = inotify_init1(0x0) r21 = gettid() fcntl$setown(r20, 0x8, r21) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r24 = gettid() waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r25 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r25, 0x29, 0x17, 0x0, 0x0) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="610ebbb181255593412f4c3b1a317bb8407e7e8a3f6131a0c43deb926086bb83604858163ca9298578f27a42a55fbc78e1a6897c795a4929f2d75d718228d38156", @ANYRES32=r25, @ANYRESOCT, @ANYBLOB="9633810741b09808cced8211681d8428b1c9a3f6d724d93ac77b4461c381214c29391edeea9bf56366cb93", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r14, @ANYBLOB="e927bb24ca8eb5f3b8de24c07c490008019c829723efb6e1ce7de88dec75ba73e4b4415747db27c39d39d08db5563b83b1b615edbfa45cb75b4231b93bfb4c38252d6f01587266a202c88cd178d37252a325f74b50859f63dfcf7c2d24fca664e512feaa0c09ba64b65e1bb01487d88225156ca6bea4f2f74e26bef4e57b238c96cdaecec02b68ea34888feceb3e39dd8bb6fa971d1fce24c71c033bc272ba60817febe37fea40410838e47e52c77541fbd6f1daa3287bb245c97a81a6080de1ed7fb159a85b2b4202ea6850b98a79c73819737d28d3a2c3e73f61c32eac182d29b82ee95b2b", @ANYBLOB="0f0a1dda840c4787a032b0328256142f18935f21be6121df396f262a4dd50000000001000000c4a70f1c92cd6273854303ca7bca8c1f420f7c0be15c588c784d695688c1e56246a0e8749bf1f7f1b1adda393056"], @ANYBLOB="c1f58918306ba110fd022f818375a59e14387c1acbecba85386f1bf9227edfd918b813c24991b2f04b43a53142c927228e6fca18a54fc5fce088ef42c5c08b2e1cd4fef5e471385780390b3f90bb0e5ba1278373b13a374246cd03a320ba5738434f9e225cfecc2bf1cf0374", @ANYRESHEX], 0x76d4447cb925a2dc}}, 0x20004850) r26 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r27 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r28 = dup2(r27, r26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r28, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r28, 0xc08c5334, &(0x7f0000000200)) r29 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r29) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r29}, 0x0) kcmp(r29, r29, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r29, 0x0, 0x0) r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r29, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r28, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, r15, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r14, r12, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r7, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x9, &(0x7f0000000000)='vboxnet0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x1, {0x0, 0xfffffffd}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) 11:49:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)}}], 0x1, 0x100, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) getsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000040)) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0x200) syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x7f\xef\x00\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x7) r5 = dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000008080)=[{{0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)=""/183, 0xb7}}, {{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000001200)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x31}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003ac0)=[{0x0}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/100, 0x64}], 0x3, &(0x7f0000003b40)=""/132, 0x84}, 0x4}, {{&(0x7f00000002c0)=@caif=@dgm, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003c80)=""/231, 0xe7}, {&(0x7f0000003d80)=""/13, 0xd}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/129, 0x81}], 0x4}, 0x9}, {{&(0x7f0000004ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004f40)=""/79, 0x4f}], 0x1, &(0x7f0000005000)=""/138, 0x8a}, 0x4}, {{0x0, 0x0, &(0x7f0000006980)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000006a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007fc0)=[{0x0}, {&(0x7f0000006dc0)=""/4, 0x4}, {&(0x7f0000007e00)=""/165, 0xa5}], 0x3}, 0x4}], 0x8, 0x12040, &(0x7f0000008300)={0x0, 0x989680}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='io.stat\x00', 0x0, 0x0) sendmmsg$inet(r5, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="fafc9d", 0x3}, {0x0}, {&(0x7f0000000400)}, {0x0}], 0x4, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}], 0x58}}, {{&(0x7f0000000840)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000008380)=ANY=[@ANYRES32, @ANYBLOB="ac1414aa000000000000000011000000fafef41633ed672221000000010000000000000054000000000000000400000007e0000002e00000027f000001071b7d0000034100000009ac0f940efb76660237cff0281facb2880009000000001c00000000000000000000000800", @ANYRES32, @ANYBLOB="ac1414aaffffec5f982b00002f000000001900000002000000"], 0x8d}}, {{0x0, 0x0, &(0x7f00000085c0)}}, {{&(0x7f0000009cc0)={0x2, 0x4e24, @rand_addr=0x800}, 0x10, &(0x7f000000b100)=[{&(0x7f0000009d00)}, {&(0x7f0000009e80)}, {0x0}], 0x3, &(0x7f000000b180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x18}}, {{0x0, 0x0, &(0x7f000000b380)=[{0x0}, {&(0x7f000000b280)="a428c4b1c62a371c0d36eea66c328c855301df5ed29535b4396b736a308aafd5bb2b41809149580d9fc169476fddb8c30cb42011d676f22ccf1307f318efd746f4005d50dff9e887612cf5680efcb437ee012fc98b79b9527b76bffcb36d18e4a75d37366dcb526a800b0d1469e85f3c919722c4b8e0829524abfe3954c4153dcdcec2c902f103", 0x87}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f000000bb80)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x7, 0xc080) geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='md5\x00') r6 = gettid() tkill(r6, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) 11:49:29 executing program 4: write$selinux_load(0xffffffffffffffff, 0x0, 0x485) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000000)='7', 0x3b, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x89) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x74, "9277acac093893628314de3b468703952335c4c70c8330db3c41c6152f18005233d0d6394e9c02e684549457a346f9f053bbdbd13bc491481d5a21927106e23fa2aa9674269218791d2a13479a417046e4f6b955260202486a62f01775bbf2fd2545bd2dab5e2b3e3fa059d14afef42b9cd2d0f9794dfe567ae745eeac7b948d"}) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getuid() socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) 11:49:29 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x800, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000002c0)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010005}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000227bd70001f000000010000000000000008410000004c0018000000007564700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8dad000aff4fa1f81926a65ff008a664dac0ca1159ea19f2b9f509538d327e95614c4040e69c694ae5202f67f442c0cd7"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x208eadf29177a09e}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x40014) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r13, 0x0) sendmsg$nl_netfilter(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x260, 0xb, 0x2, 0x600, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x8}, [@nested={0x220, 0x3e, [@generic="26c973c5a0a76a078bc3b0f4d6ad9a39e6ff01ff644f51b4f9dbae3f758d41ab8764e2e498aec5f5c248d7148f1ab8a1787f30286c40bfcfd7c412effe192fa6f8556e0bc9c0c45ee7fe88595f", @generic="74d5b4c3bd235682e4e3f6282e84e7b6c7ea1dea233a5f0dbe675a986cc81d63066af381a1cf10029651bc0d6d89edc322c8e1b475e7f9316eec2ae9804274bd51aa76996117abc821e325f61b08b57c3890d82f7526865a4a81b9f6f6a4e34480fab2ef422d018f24e39ce895afcb4f2e7ce9b4798e3535f2a81908f85ff99534a5f22bce88a22e9f632ac35cba9b8a835003f2f25fe46ae5bd675a4913285c97a557db04668dc005ef0cb80dc59a19ad12db690e7d7f750f65017607ffbf9325dc47bad805d28f23ddd4b3c8399b5987f71f416b4f1dcd21a254355a2c6c18", @generic="0b00229770acc6607f56092c5c4f8337cc2ca2c17695a472f41467ed1bf5fe91d9972ca10427ea0bb1286a90a6b9ce00433e2c666667deaf8994280b4ce11c40ea488b8cb3891129104f1aeb7ec377ea80577d3400d4b9c6a0249ab4a1fd83af86ef67220d0293b65c1c04", @generic="32b0a66fffbca262b41cd6ec5d863d83509a0708b4162cf50174f04cff88c98ff8012f42ab77f74504bd78c7d49aa7e99b92a3915dde334d33144c6d60f503d157d82d5e62dd8d74f768f1db9f7cfb71b7429bd52c34cb3cc317fc5179c6b417a0022af0bb471edb768a719fb009f2cfc1ec8900df4e5cfe5c940fe68b20e81b358b3175"]}, @generic="79b64104", @nested={0x28, 0x22, [@typed={0x8, 0x21, @uid=r13}, @typed={0x8, 0x67, @fd=r2}, @typed={0x14, 0x79, @str='/dev/cachefiles\x00'}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x180) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 11:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/\x00\x00!<{HA\x8fo#\x00', 0xd, 0x9bfa1c54b278d073) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r12, 0x0, 0x0) r13 = getpgrp(0x0) waitid(0x0, r13, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r13, 0x9, &(0x7f00000001c0)=""/68) r14 = getpgid(r13) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000000)=0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = inotify_init1(0x0) r21 = gettid() fcntl$setown(r20, 0x8, r21) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r24 = gettid() waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r25 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r25, 0x29, 0x17, 0x0, 0x0) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="610ebbb181255593412f4c3b1a317bb8407e7e8a3f6131a0c43deb926086bb83604858163ca9298578f27a42a55fbc78e1a6897c795a4929f2d75d718228d38156", @ANYRES32=r25, @ANYRESOCT, @ANYBLOB="9633810741b09808cced8211681d8428b1c9a3f6d724d93ac77b4461c381214c29391edeea9bf56366cb93", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r14, @ANYBLOB="e927bb24ca8eb5f3b8de24c07c490008019c829723efb6e1ce7de88dec75ba73e4b4415747db27c39d39d08db5563b83b1b615edbfa45cb75b4231b93bfb4c38252d6f01587266a202c88cd178d37252a325f74b50859f63dfcf7c2d24fca664e512feaa0c09ba64b65e1bb01487d88225156ca6bea4f2f74e26bef4e57b238c96cdaecec02b68ea34888feceb3e39dd8bb6fa971d1fce24c71c033bc272ba60817febe37fea40410838e47e52c77541fbd6f1daa3287bb245c97a81a6080de1ed7fb159a85b2b4202ea6850b98a79c73819737d28d3a2c3e73f61c32eac182d29b82ee95b2b", @ANYBLOB="0f0a1dda840c4787a032b0328256142f18935f21be6121df396f262a4dd50000000001000000c4a70f1c92cd6273854303ca7bca8c1f420f7c0be15c588c784d695688c1e56246a0e8749bf1f7f1b1adda393056"], @ANYBLOB="c1f58918306ba110fd022f818375a59e14387c1acbecba85386f1bf9227edfd918b813c24991b2f04b43a53142c927228e6fca18a54fc5fce088ef42c5c08b2e1cd4fef5e471385780390b3f90bb0e5ba1278373b13a374246cd03a320ba5738434f9e225cfecc2bf1cf0374", @ANYRESHEX], 0x76d4447cb925a2dc}}, 0x20004850) r26 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r27 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r28 = dup2(r27, r26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r28, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r28, 0xc08c5334, &(0x7f0000000200)) r29 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r29) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r29}, 0x0) kcmp(r29, r29, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r29, 0x0, 0x0) r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r29, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r28, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, r15, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r14, r12, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r31}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r7, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r31}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x9, &(0x7f0000000000)='vboxnet0\x00', r31}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x1, {0x0, 0xfffffffd}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) 11:49:29 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x10000, 0x101000) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000001c0)=0xfff) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30b2080691041db57fff00003230302e7a0d6656da22500f1f7bb6"]) [ 133.322595] devpts: called with bogus options 11:49:29 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 11:49:29 executing program 1: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x3c) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) open_by_handle_at(r1, &(0x7f0000000180)={0xcd, 0x4, "d9a6c31e03c6eeddc47919a4ea8779e61527cb57fbc52e85a6a3e45a68b1e7eaade7ac5837c98658c1943e95ef82feebc38ac6cce4f7cedeee98ca1037a997035b40c5ed9e78cd44432500f9bd3c9f33ae5a544f73fce9921aeb43880efc322c249178168de7b67ad8abd3934a45d04a3d506b6d71553cbc4cea82728ea61c2bbbae2bc13b0b26465afb1c499321aa4e5151250d7271f63ebf1a59166444c258a514ba8aebb1f0a89b0b2aabce84a4f3b7834f7b39fb34479c7980e54e92982b31bbee5536"}, 0x6041) [ 133.438200] hfs: unable to parse mount options 11:49:29 executing program 4: write$selinux_load(0xffffffffffffffff, 0x0, 0x485) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000000)='7', 0x3b, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x89) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x74, "9277acac093893628314de3b468703952335c4c70c8330db3c41c6152f18005233d0d6394e9c02e684549457a346f9f053bbdbd13bc491481d5a21927106e23fa2aa9674269218791d2a13479a417046e4f6b955260202486a62f01775bbf2fd2545bd2dab5e2b3e3fa059d14afef42b9cd2d0f9794dfe567ae745eeac7b948d"}) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) getuid() socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) 11:49:29 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x25a00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x10004}, 0x0, 0x0, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000400)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x4000002, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x36b3c6f944b623df) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x351, &(0x7f0000000280)={&(0x7f00000024c0)=ANY=[], 0x2}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r7, &(0x7f0000003540)=[{{0x0, 0x2be, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) sendmsg$rds(r7, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000002c0)=0x0) sched_setattr(r9, &(0x7f00000003c0)={0x30, 0x6, 0x1, 0x1, 0x2, 0xc, 0xbf, 0x100000000}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={0xffffffffffffffff, r10}) sendfile(r7, 0xffffffffffffffff, &(0x7f00000000c0), 0x4f) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 11:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/69, 0x45) sync() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup(0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e20, 0x0, @rand_addr="41f5442a13b01c467c11ac49a998aa98"}, {0xa, 0x4e21, 0x0, @mcast1, 0xfb}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x401]}, 0x5c) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0x4) 11:49:29 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x200000) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, r0, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a00000000ff07000000000000000000000000000000000000000000004200000000000000018000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 133.920845] ldm_validate_privheads(): Disk read failed. [ 133.926961] loop3: p1 < > p3 [ 133.940819] loop3: partition table partially beyond EOD, truncated [ 133.960459] loop3: p1 size 2 extends beyond EOD, truncated 11:49:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20, 0x0, 0x0, 0x80, 0x0, 0x1fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@ng={0x4, 0xd, "e34f1fc5f4df02766dec79616f84b9430aed1f"}, 0x15, 0x3) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010000527d25a80648c63940d0300fc00100002400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 133.971834] loop3: p3 size 32769 extends beyond EOD, truncated 11:49:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/69, 0x45) sync() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup(0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e20, 0x0, @rand_addr="41f5442a13b01c467c11ac49a998aa98"}, {0xa, 0x4e21, 0x0, @mcast1, 0xfb}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x401]}, 0x5c) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0x4) 11:49:30 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="232120172f956128a9250ad56027339035696c65300a0000"], 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000017c0), 0x1000000000000012, 0x1f000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r3, &(0x7f00000017c0), 0x3cc, 0x1f000000) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r4, &(0x7f00000017c0), 0x3cc, 0x1f000000) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x2, 0x200802) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r6, &(0x7f00000017c0), 0x3cc, 0x1f000000) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x880, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf25010000004400070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="959c1b6bd075866532832b040000000000049097974925d281ce4d9b5a1a998fbb155c4a9748ca8cd64f4ec3f675dd56ab0461a610aff8365a56f78271ec482f4c05353ff1f3b3f7304a8094606d78ff2d7ff4284081505f677aa3ecaef1fb9f7d084906db4b70303920000000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c00080007000000000000000c0008000000000000e0ffff0c00050000000000000000000c000200988200000000000008000100000000003c00070008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100000000000c0004000d000000000000000c000200fcffffffffffffff"], 0xec}}, 0x24004090) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r8, &(0x7f00000017c0), 0x3cc, 0x1f000000) poll(&(0x7f0000000100)=[{r8}], 0x1, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3b) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)=0x9e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) 11:49:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) accept(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x80) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003180)=[{{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @empty}}, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/2}, {&(0x7f0000000440)=""/61}], 0x0, &(0x7f0000000740)=""/130}, 0x1}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/4096}, {&(0x7f00000018c0)=""/81}, {&(0x7f0000001940)=""/119}, {&(0x7f00000019c0)=""/227}, {&(0x7f0000001ac0)=""/253}, {&(0x7f0000001bc0)=""/101}], 0x0, &(0x7f0000001cc0)=""/4096}, 0x2}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002cc0)=""/169}], 0x0, &(0x7f0000002d80)=""/204}, 0xb2}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e80)=""/236}], 0x0, &(0x7f0000002f80)=""/210}, 0x2}], 0x1a9, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) fsetxattr$security_evm(r6, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@sha1={0x1, "35a8ed3d47e3e5487a5f34b98daee003351bc159"}, 0x15, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r7 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r7, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r8, &(0x7f00000017c0), 0x315, 0x800000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x37ffff, @loopback}, 0x1c) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x1}, 0x20) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) 11:49:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x3ff}}}, 0x84) r3 = fcntl$dupfd(r0, 0x0, r1) geteuid() bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) r4 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000380)={0x14, 0x11, 0x2, {0x1, 0x4, 0x6}}, 0x14) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000040)={0xffffffff, 0x6, {0x56, 0x0, 0x1, {0x1, 0x1}, {0x7fff, 0x101}, @period={0x5b, 0x0, 0x5, 0x0, 0x7, {0x8, 0x7f, 0x1, 0x7}, 0x2, &(0x7f00000001c0)=[0x46c1, 0x4]}}, {0x56, 0x5, 0xb9a3, {0x1ff, 0x33a6}, {0x7, 0x1}, @cond=[{0x1f, 0x3, 0x19bc, 0x8, 0x8, 0x20}, {0x6, 0x2, 0x54, 0x2}]}}) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000300)=""/112) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xffffffffffffff34, 0x9}, 0x6) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000003c0)="67660f6bb667a7915e0f20c06635080000000f22c0ff5c65660f3881ac9d000f01c50fc72dbaf80c66b807f1be8566efbafc0cecba4000ec0f01c966b8cb7e00000f23c00f21f8663501000d000f23f8", 0x50}], 0x1, 0x10, &(0x7f0000000480)=[@efer={0x2, 0x4403}, @dstype0={0x6, 0x7}], 0x2) [ 134.317973] ptrace attach of "/root/syz-executor.3"[7600] was attempted by "/root/syz-executor.3"[7602] 11:49:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="a6ebeff2aec1c7219be7d2959bc14587d78c264e51000000000000000000000000000068a27804ac0f6846694943b94941fe0ceecd02000000000000001e45b8d876943bca66db0ec88622dcb1e25c8bacd13a2b477f53084266b767a18386f091f1d09a6b638d6e6238a7ebd6c9392320db01ff6fa807ff30ef0dd256e1cc8dd8bbbdcf9d78d459fc2347eafc6a954742f6965dc3d09edcaa2b8c91053d58d33075a77ccad475f1381f2d9f7e0648a741f73286c987852819146a2af0ac1c91f43f2ccf6ae17c6090", 0xc9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:49:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ec09000000000000004e0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f91f828b16bdd63dcdb0d79e65199615607672c59957ab35f4ad614fd33cebbc150bb7dbdabae1775b5b2461179f50200000000000000ba001b50c0cb395b240edf4a017ebb60f9af6cbc360f302ec433766e4eea922d3a5448af2196250408a7", 0x97}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) r2 = getpid() r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x40, 0x2, [0x7, 0x6]}, 0xc) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)={0x6bbf}) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 11:49:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='^/at\x00', &(0x7f00000004c0)='./file1\x00', 0xe000, 0x8, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x1000, 0x440}, {&(0x7f0000000080)="86c6669c27587e945197cc8356cd37c47af7bbb7990347df6af69a6af612ae4ffe13f79015a6e61144bedab59faac3631d00528acb8794012615aee01b9832c70cc20ad8558e76535969d77ecaf85c07c4d0", 0x52, 0xfffffffffffff90a}, {&(0x7f0000000140)="c2316bb35a062e1c5d73da0072130e62bd8edc1b4b9fb3fc26a86dcfde68b1541edafc6da8d94947f35d218d8d82b682ca09e3cdd4bd68fa08a1ae5ac2286c95880447f9676304e56a0f61ce580e63c67627", 0x52, 0x7}, {&(0x7f00000001c0)="4621aea6095093bf9cd83756f66e9ea3", 0x10, 0x19}, {&(0x7f0000000200)="09e2526a3bc3137e010000000000000047faad66e1f703c50b5c244d8d71cecc90", 0x21, 0x2}, {&(0x7f0000000240)="873a963a09da132a4a6c186a3ec1ec307d80e682e7632a1a032e83e076e18a85c7dbc55ff87666128d5787d37b0e039fb8810fc2f3c8baf9a8db6f27844cab576fba7bc8526ef7c9694fdec477b6102239bc26d71d9a90312c3a0a671a81492388bfe853674fadf37de5540200"/118, 0x76, 0x7ff}, {&(0x7f0000001680)="275fd1c1764b7360ae0c5f686e0dc1b22141129031ac4b44fd93f08b8d2eda5783c0e89d47897c11a2beec0e6a050bb9fdf7639031c1edb3a5b35c641d44aaead357bd87d06e55544c890f55ec8fe4fd39835de70327037c1bce1baee0a3b74b086c9342f19d49d676e7f46179cf04153f220b5c42a963d8821281dc777158ca599418991d5411235e958a308b3b23fcbb1ebedf15585361297e052606f1d24d7fc2453f0b87e93d46dc02381ca002769294a48d10f059293a8e34cf99d05baf0d6e2990d9fefb8e7b0077f6eb10", 0xce, 0x8000000000000}, {&(0x7f0000000300)="d568b372ca3a66e9eb061df54a61b9063f7da5545e0b29e8f2a46b6260b419234bab89799eac0774756943bd386bdf4379d0f01765a1788ea73b0c31d4ee3d0eb2dc0f7d3a6d701737befd83150c8b18915a29095209cd97983888cbf4a7021aeeef0abbe7c5fcc41b2bc879e6b9700a72f2ef50cacef153106043ec18bab1bf6fdbef4952c1f462599cdfec068ac6ffd150e5b7c4708b0870", 0x99, 0x178b5b5b}], 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x40}, 0x10) umount2(&(0x7f0000000540)='./file0\x00', 0x6) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000001800)={{}, [@remote, @default, @bcast, @bcast, @null, @bcast, @remote, @default]}, &(0x7f0000000500)=0x48) recvmsg(r2, &(0x7f0000001f00)={&(0x7f0000001780)=@alg, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001900)=""/144, 0x90}, {&(0x7f0000001580)=""/67, 0x43}, {&(0x7f0000001a00)=""/40, 0x28}, {&(0x7f0000001a40)=""/105, 0x69}, {&(0x7f0000001ac0)=""/239, 0xef}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/215, 0xd7}, {&(0x7f0000001d00)=""/190, 0xbe}], 0x8, &(0x7f0000001e40)=""/152, 0x98}, 0x0) 11:49:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x200000000000000b, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25, 0x0, 0x0, 0x100}}, &(0x7f00000002c0)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) fadvise64(r4, 0x0, 0x30cf, 0x2) 11:49:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0xffffff69}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x2000005) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, &(0x7f0000000000)=""/46, 0x2e}, 0x40012002) vmsplice(r2, &(0x7f0000001940)=[{&(0x7f0000001700)="00591eb9aed5460d40149a6e2e37b79f75b3add897985839490dbd1bcb892bbaf58423220d063f10098bbaa5ccbe140e4bcfd37557c425d4c9158608db70cdbc49e53ae6e9feb1880b9456b0aad0c18415b1a09a3e108de10a826d3359e456dbb32059aa534583285e06a01b6827a245fcd9d4aed9823e3cd6750f64f1434c1be6153dec8976f6e59e9ff87f6e897f1011a77c66da87be456f858512b00fe78d9638ee5126917cbd9faa978f2b5535cd6f0f48c310b4551c95fdf1bba9f2e4db2b3335a3", 0xc4}, {&(0x7f0000001800)="a98681276c0b7da2be40ba5b6a8c97f6b90350c3adc3b605f38b1c29fa29fca4ec86ee5641f76f7d255ac817976b185f4e3d985a8bf52753fd5aa72423f42ddb3df5320a96732f418875373f05987343d393930f692d15c2fe0f37a820e02a0f05e1555631140da4ca061ec2b7", 0x6d}, {&(0x7f0000001880)="52bfade0b1c5ac04e9325328ef2dfd44b58b5fa8fe357e6840aa91e280c88c3405300485e15cc297663a8534a6f4e4a50348837c8348f826b045cf263f9237f9571be1364acd552accf34f06252c7db0198f969f927428d637bdcb00a56a37bbd3f5b02560aa2bc34c10f9c102cb1b7fba2863800d0559ac23dad97a2afdd92271063b1aa920141203a5", 0x8a}], 0x3, 0xa) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setparam(r3, &(0x7f0000001980)) 11:49:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(r3) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:49:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400900, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)=0xd82c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xa}, 0x4, 0x0, 0x0, 0x7, 0x479c, 0x4a}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000003c0)={r1, 0x3}, 0x8) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000240)=0x1000, 0x4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xef}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, 0x0) 11:49:31 executing program 5: unshare(0x2a000400) msgget$private(0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) getegid() r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x8000400) shmdt(r0) 11:49:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7, 0x100) getpeername$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e) r2 = socket$inet6(0x10, 0x8000000100000003, 0x0) r3 = dup2(r0, r2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000000c0)={0x7fff, 0x3, 'client1\x00', 0xffffffff00000000, "77c88bd2e487a78d", "ad26bd5154bdaa0d8cab72080f0e102d6c1954f6919a548291b4abd15694299b", 0x90ba, 0x7}) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) sendfile(r0, r4, &(0x7f0000000040), 0xffffffffffff8000) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) sendfile(r8, r6, 0x0, 0x8000fffffffe) 11:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x229, 0x4) 11:49:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x139, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0xfffffffffffffcca, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xffffffffffffffb3}}}]}, 0x3c}}, 0x0) 11:49:31 executing program 4: socket$key(0xf, 0x3, 0x2) readv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x3b1) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x32d, 0x0) 11:49:31 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLOCK(r0, &(0x7f0000000200)={0x8}, 0x8) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') 11:49:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 11:49:33 executing program 4: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, 0x0, 0x0, 0x70bd26, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}}, 0x8000) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000d83990832ffdd40a409f01f6147c8f6fd267bf41106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a613782ccdfc129d2c67b2c70da0037ad1efc966f1cfdc4ea29f673efc20c8dec082bc6de68ab0a5ebf4ee60253518172b4226cc871311ab25868e1d9a0142636973f338d2d41c41e415a2bcc922a3aa71489fad041e59cc9f6e79e0993c96e4c43518cf72e4bcff56cf5a863efb43ea723476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a57b31031cc158a0a4c6dd4880c767f39a161b050abc5a34588ea19114caebb7995"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:49:33 executing program 3: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, @default, @netrom={'nr', 0x0}, 0x4, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000580)={0x0, 0xa, 0x0, [{0x0, 0x1, 0x4, 0x81, 0x0, 0x40}, {0x8, 0x3bd, 0x4a2, 0x7, 0x2b, 0x9, 0x1}, {0x0, 0x0, 0x10001, 0xff, 0x0, 0x1f}, {0x690, 0x100000001, 0x200, 0x3, 0x40, 0x3, 0x5a}, {0x7, 0x7f, 0x4, 0x0, 0x20, 0x92, 0xf4}, {0x3505d15b, 0x100, 0x0, 0x7, 0x7f, 0x38, 0x2}, {0x400, 0x100000001, 0x7, 0x81, 0x40, 0x0, 0x80}, {0x6, 0xff, 0x1f, 0xfa, 0x5, 0x6, 0x6}, {0x24, 0x6, 0x8, 0x3, 0x3f, 0x8, 0x5}, {0x8, 0x1, 0x7, 0x1f, 0x8, 0x81, 0x9}]}) write$nbd(r2, &(0x7f0000000100)={0x67446698, 0x1, 0x4, 0x1, 0x1, "1516cc789fda7f56bf78551f51c90e62ca053e50efd093f6cdbeb2e3b1000863a516462237ddb92ce74c1843b12046ad7135f4771fe65de45a4940e954ba70f38fc6470942ad679856cb78f7b0c58dab30447512d2d0de2b534cbf481bd1b93e18c8ab1d4e2b08e7e5edbcad1284ad31e293e4ffc72ad657831bc4d5c2662efa6ed4faa19c434719c78aaf64f86f735effce2afa704318f08c32a7e384b363e330f6f034461e6b364299a04d331ec8ebd446308a6d5cb6e002"}, 0xc9) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x3c, @multicast1, 0x4e20, 0x4, 'ovf\x00', 0x10, 0x6, 0x47}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23}, 0x80, 0x0, 0x0, 0x0, 0x94}, 0x0) 11:49:33 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153b", 0x96, r1) r3 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x322, &(0x7f0000000140)={&(0x7f0000000040)={'wp384-generic\x00'}}) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153b", 0x96, r5) keyctl$link(0x8, r2, r5) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x67, 0x6, 0x2, 0x20, 0x1, 0x8, 0x3f, 0x8e, 0x1, 0x3, 0x1, 0x4, 0x1ff}, {0x4, 0x5, 0x84, 0x9, 0x8, 0x40, 0x4, 0x81, 0x3, 0xc4, 0x3, 0x0, 0x5b86}, {0x0, 0x9, 0x40, 0x20, 0x1, 0x8, 0x81, 0x3, 0x86, 0x2, 0x40, 0x3, 0x8}], 0x2}) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r6}) accept4$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa4be611192c47b8f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00fbb70000d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f0100000000fca0d971e9fd2bb4b88e524ae03e6521c84c1d7afa5cac81f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d95dfcc7e08e6dc8bbcceb36c8006a8f1f30d73c8bed605e80f0ffffffffffff868f4201d9aefb6a5bbb0b991d5869ba58b29657e9f52d253cd1763b5b63f2e3a903a61b5f356a92a7cf414929d5a711c5e5ecccac591c16810e2139361bf5d4c622e51838be0519213dd7c5877769c93cf9834d14f4380af8105ed77b8270ce92bc9abd2bd3845c66c70438e35226614ccab04740fefdb60db0f84751d920ff76f11409f13e2e917e04430baaae9183bdbc425a676e446d1c9d2e6bddb8a2bc0fc34b47c489da04495a9d14c81173b48e00fe958fb7f4cfb3611d43fc5a36461c2e6175f6f5a4b69482d0"], 0x60}}, 0x0) 11:49:33 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r1, &(0x7f0000000000), 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f0000000040)={{0x0, @addr=0x8}, 0x8, 0x9, 0x9}) ftruncate(r5, 0x208200) r7 = msgget(0x3, 0x0) msgctl$IPC_STAT(r7, 0x2, &(0x7f00000002c0)=""/248) r8 = msgget(0x3, 0x0) msgctl$IPC_STAT(r8, 0x2, &(0x7f00000002c0)=""/248) msgsnd(r8, &(0x7f0000000440)={0x0, "b515d604f4d07af3cafc6a6a6207ce1b4418b1c1f3f0cf05e7cf9f1f495a9cacdc3007ff00000000efc9a8ca71d40689fa0033a183fd553bfc3f33e16399132914946f9912b391af55"}, 0xffffff3d, 0x800) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)={'syz1', "fca1c530b2ab53a15238fe800edab13f128d7d77dd85ebf326c4a2d3a56df9658f36faf04ed9743d0c30e2314645c085c4c6faf7af029f02a8887ed4bfc2b58a8db30a831ca52984a5e0af09971cb44a211d3c3fbaa4f20c0ee3086088489143836c6a042149bc38495526228fc3226cbfe815675db6c445a26f3648397facd604fe970f31d9d2bd15187d03b0a8635b433a38a9"}, 0x98) sendfile(r0, r2, 0x0, 0x8000fffffffe) 11:49:33 executing program 3: [ 137.643031] audit: type=1400 audit(1572608973.721:107): avc: denied { create } for pid=7711 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 11:49:33 executing program 4: 11:49:33 executing program 5: 11:49:33 executing program 4: [ 137.773342] audit: type=1400 audit(1572608973.751:108): avc: denied { connect } for pid=7711 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 11:49:33 executing program 5: 11:49:33 executing program 3: [ 137.831815] ÿ: renamed from lo 11:49:33 executing program 4: 11:49:34 executing program 5: 11:49:34 executing program 0: 11:49:34 executing program 3: [ 137.948328] audit: type=1804 audit(1572608973.751:109): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir354896377/syzkaller.9wfGbV/32/bus" dev="sda1" ino=16669 res=1 11:49:34 executing program 1: 11:49:34 executing program 4: 11:49:34 executing program 0: 11:49:34 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="5d99aef9e6a8afc15d89422e5d53244dacbde637dad9df96fecdb414918da9f57c5714a756a685d2be9ab6a6943f216c9c9cf3e27fee52af1330fe8b93eb3dac0c75183ebeaa818941e849f3493fd25e190292b97edd3642d4f17aac44888b2938f3c0147736d95103514bad8897e87a09e2df95b7f822e5a9c8185b0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) close(r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="f4001100002b0625fe8000000000000005baa68754ba00e8c1344f3e62d76c27e800004102ffffff8800", 0x5ac}], 0x1}, 0x0) 11:49:34 executing program 5: [ 138.098489] audit: type=1804 audit(1572608973.771:110): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir354896377/syzkaller.9wfGbV/32/bus" dev="sda1" ino=16669 res=1 11:49:34 executing program 1: 11:49:34 executing program 4: 11:49:34 executing program 5: 11:49:34 executing program 1: 11:49:34 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0xfffffd95, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 11:49:34 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@srh, 0x8) 11:49:34 executing program 4: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094440000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000080000000000000000000000000000000000000000000000000040ac0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000001c0000000000000000000000000000a613a2230000000000000000000000dfd0282e31b8046d600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ded937a77f657744296e5d4300000000000404110061ca7c55a5e42d81d14334c789375b23d36d0b7bd15e04e813cd723f47ce56dffa04c1f203e51942829b669c021a132a47ccf4ac88c150bfed88c8aa4d9defaf6839814663b22c44fc5c577657253c50de4d1797c8a8195d482f8537d4f9aeaf495c01d5a31348917325b55b4136f49a20b50d881350d03870439d9749097585033723069099a0c14b7ca9b9fdbba4b31e8658d38d801fc0741fd6d09437d0c202fb169986510e42a9013102247ae529fe94b9529742c76d1825a441f8205c765deabf008b3e6ac5064c0c2ca8030c651abbfe7fe8803ff6a2a5de91470a21ed3a29fbe853bf2625e006004540a74b2b69d9add19c110c2cccfc32f7f99ea69994f81d903641120915cdcf49efeed42a2054e0544b5f53f43e4f7ab5b6037071e14229606aa0c3d7b7313232a904dbaedc6bd9fe7a1e54afc699624941b6c58fe24ca2338d97bbae7b60c350e72039f84320e39fdf444997aa080a882a81da917d4739bcbb223be6ab216c4426283ebf2a37e3e88b6c09b5cde0603e2f899871f52e76054243f680e620f6896c8c78a66f84e43692478c0135b491ac8248dd51f11f905b4784f1912f13541c500158cae97708faf31b49"], 0x310) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000400a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000001b1fef4d609c27ab"], 0x90) 11:49:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x40001}) [ 138.362473] audit: type=1400 audit(1572608974.441:111): avc: denied { name_connect } for pid=7787 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 11:49:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x88000) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1ff, 0x448480) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000000c0)={0x177da1aab87eb306, r2}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) r6 = socket(0x11, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={r7, 0x401}, &(0x7f0000000180)=0x8) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r8, r9, 0x0, 0x8) 11:49:34 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000001) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000300)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigaction(0x41, &(0x7f0000000240)={&(0x7f0000000140)="6666470f38215d00f20f2df02e0fffa351df247364660fd2952f2b00002ef3afc4c134c6646cffcec4a2614657026640d8d2c481c95832646e", {0x2c0}, 0x8000000, &(0x7f0000000180)="f3460fa7d0660f3805dd65660f3a20464d00450ff61bc46179d7d62ec160beea2e45d8ed660ff80ec463356d66b30bc4a279189465614cc2db"}, &(0x7f0000000440)={&(0x7f0000000380)="c46191f1f365dceb36430f3808c4c4239d0d6700ebc4c1e5d8630cf343d9fac4e2e12924ff67f3420f1edbf3410f0f5100a6c401f913420c", {}, 0x0, &(0x7f00000003c0)="c4a27918e7c4e279995026f04630729ac403156fc3032664660f38de2d00000000440f18583c410f52c3c4827d3e2ec4e3a9cf303c461bfd"}, 0x8, &(0x7f0000000480)) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x6, 0x4, [0x40, 0x0, 0xfd, 0x8]}, &(0x7f00000005c0)=0x10) write(0xffffffffffffffff, &(0x7f0000000200)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc0800190001000000", 0x24) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000004c0)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41006800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000100)) sendmsg(r6, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 11:49:34 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0x7, &(0x7f00000002c0)=0x4) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x7, 0x10, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x0, 0xffffffffffff9ab3, 0x0, 0x0, 0xc999, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() sched_setattr(r2, 0x0, 0x0) r4 = open(0x0, 0x400100, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) gettid() r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) open(0x0, 0x124683, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x660c, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, &(0x7f0000000280), 0x0) r7 = dup2(0xffffffffffffffff, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc08c5334, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r8}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) 11:49:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x559d00, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000140)={0x2, 0x2}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x40, 0x7, 0x1b, 0x80000000, "237fb4d6b56280e3687be7399d613f0833814d336ddd0ab1f481b457eabfab74"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0xd8a}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000240)=0x2, 0x4) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) 11:49:34 executing program 5: creat(0x0, 0x109) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000001c0)={0x33, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x0, 0x3, 0x75}, 0x2c) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) poll(&(0x7f0000000080), 0x0, 0x7) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x30000, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write$capi20_data(r2, &(0x7f0000000780)={{0x10, 0xff, 0x0, 0x83, 0xfff9, 0x81}, 0x1000, "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"}, 0x1012) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000f21301ce646ba1a3459e4cabcf1e15566701800100000000006722b4ecb75c523a1e561f"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x03\x00\x00\x00\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5\xfe\x13\x15\x14\xd7\xb8\xed\xf20\x1e\xc0\xc2\xedz?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7J\xbdX?\xc4\xf4BV\x1744`\xd1@\xb6T\xa6\x81\xb0\xfa\xc4RW\x01\x1f%\xd8\x01\xd0W\xc8\xb09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#\xf7a\xff\xff\xff\xff\xff\xff\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x00\x00\x0e\xa9\x04G*\xd4]\xc3\xcdp\xca+x\x93\xc0g.l\t\r\x1bE\xf3Y\xf0G4\xde\x970]\xa2\xf0\xc4\xb7\x19\xc5xe\xb5\xe2\v\xff\xf8i5I\x89\x9b\xcdZ\xb4\xcd\xa5|\xe2\xca\x88\xf8|\x99\xd09\xb4zc\x90g\xd8\xf1\x05\xefH\xb2\xf8ph\x04\xfb\x9e\x84\x84\x80\x17r\x1a\x88\x8fI\x9c\n\xba\x8c\x9a\x98\xee\xcc\n\x9c\xc2\xea\t\x18\xc8\xfbr\x9e*\xdeE\x80\x10\xd7\xee.\x9c\xed\x81aY:\x95\xd7&\x99\xa5\x80\x05\xec+}mu\x12\x98^\xeb\xfb\x00t?@\x81\x16\xb9\"}\x92k\x81CR\x94\xccIW5\xe6\x98\x9e\xb1\x91\xfe\xbe\xec\x17\x0f\"\xb9(5\x8aZ^\x10({A\x94.\x00\x00\x00\xd3!\x83\x93T\x87n3q\vfPx2+\vd\xdc\xaf\xe0I\x95\x00\xd7\x14U26\x85\xaa\xb5|\x187\xc3f\b\xafg+\xc1%\xd9\xd60\a\f\xb8a\xbb\xf8\x00\xfaat\xb3\xdd\xf3\xd5\x91\x19\xaf+A\xfb', 0x0, 0x0) 11:49:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrusage(0x0, &(0x7f0000000000)) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000ac0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x01\x00\x01\x00\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6a\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf1X\x8bk9fx\xe7\xba\x156\x04\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4m\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd7|\xde^U\x11\x02\x1dm\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8a\xca\x91\xe5u#D\xbd\xdfCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R\x01\x00\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f\f\x9d\xcb\x11\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\r=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x1bR\r>\xd1P\x10;\xb9o\xc2>\t\x0eZ9\x0f\xa1\xc2\x96\x1c\xff\xca\x98\xa8$sj\x99\b\xc7\x94F \xfd\x11H\xc3\xaaM\x8a\x98\x96\xd5\xab\xc6\x01\n1\bN\x14\xd5\fp\x8e\xd7\n^\xa0\xbfP\xd4\xd0~\xach#5\xd9\x11\xba\xb9Z\x95\xe7z\xec\xf7\x01V\xce\xcd\xc39\xb3\xa2\x8b\xd6H\x9bhsK\xbd\x9a/\xc9\xd3\x9f\xbb') fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x00', 0x4000}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000ac0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x01\x00\x01\x00\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6a\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf1X\x8bk9fx\xe7\xba\x156\x04\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4m\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd7|\xde^U\x11\x02\x1dm\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8a\xca\x91\xe5u#D\xbd\xdfCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R\x01\x00\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f\f\x9d\xcb\x11\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\r=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x1bR\r>\xd1P\x10;\xb9o\xc2>\t\x0eZ9\x0f\xa1\xc2\x96\x1c\xff\xca\x98\xa8$sj\x99\b\xc7\x94F \xfd\x11H\xc3\xaaM\x8a\x98\x96\xd5\xab\xc6\x01\n1\bN\x14\xd5\fp\x8e\xd7\n^\xa0\xbfP\xd4\xd0~\xach#5\xd9\x11\xba\xb9Z\x95\xe7z\xec\xf7\x01V\xce\xcd\xc39\xb3\xa2\x8b\xd6H\x9bhsK\xbd\x9a/\xc9\xd3\x9f\xbb') poll(&(0x7f0000000240)=[{r4}, {0xffffffffffffffff, 0x1440}, {0xffffffffffffffff, 0x5048}, {}, {}, {}, {r3}], 0x7, 0x6) 11:49:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x103, 0x7fff, @rand_addr="f94daf029ab113b73b27e4e11270e10a"}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x80fe) 11:49:34 executing program 0: iopl(0xf8) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) fstat(r1, &(0x7f00000000c0)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 11:49:34 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x440000, 0x80) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 11:49:35 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000039000000000000004c92e273038115fbf0aa39441db91900"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000180)=0x2) r5 = getpid() r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_setattr(r7, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x8000000, 0x3}, 0x0) setpriority(0x2, r5, 0x40) 11:49:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x200080, 0x0) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) fchdir(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x5, 0x1c, 0x4, 0x3, "2178b33ad18218b332cd1cebf5336b517c71f64ebbfad543d89cf3f546fb698f"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 139.122237] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.131720] bridge0: port 1(bridge_slave_0) entered disabled state 11:49:35 executing program 1: syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x7, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x1, @mcast2, 0x100}}}, 0x88) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/169, 0xa9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:49:35 executing program 0: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r3, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xda588bba519ce230}, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x3e8, 0x0, 0xffffffffffffff37) 11:49:35 executing program 4: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x404, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="00000e14662b9bb24309eec0b2d0ee04ab9e309313b377fba47e26ed513cb59acb4d1c2267d6a5159807d64a0a2e1d0f9fce6d835b86fe8f11819189559523c1e2efec60c946b0f8dc7b06b9844587487152609d24ce842c08d26b89b0f603644de9da7398c7e35c88f058cad6"], 0x18) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0='bpq0\x00', 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x8}) 11:49:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000580)='xfs\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f71756f74615d3d1c42d4093f57d93b2c003cc9853b9e2a806374c10c263c031b49eef0aa009d3273cd7b1ff6f5beb4756353cff33cc82d9541d53f6463f54ae8a98057ef882b51309012b35d8b0d4f4e23d838150bce0fcbf3c23808ae0b2a8db0af4790a9"]) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x3f, 0xffffffff, 0x0, 0xfffffff7, 0x401}) 11:49:35 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) ioctl$RTC_WIE_ON(r3, 0x700f) sendmsg(r0, &(0x7f0000000080)={0x0, 0xff78, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a00000a1f000007002808000800084004000304280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x92001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 11:49:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) lstat(&(0x7f0000000040)='./file0/file1\x00', 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f00000020c0), 0xf18) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1400, 0x8) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f00000000c0)) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) 11:49:35 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) creat(0x0, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x7}]}, 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) sendmsg(r2, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0xffffffff, 0x1, 0x4, 'queue0\x00', 0x3f}) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x8000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8001, 0x10300) write$selinux_create(0xffffffffffffffff, &(0x7f0000000740)=@objname={'system_u:object_r:sshd_key_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x5, 0x20, './file0\x00'}, 0x4d) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x1000, 0x3}, 0x0) 11:49:35 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x10000}, &(0x7f00000000c0), &(0x7f0000000240)={r0, r1+30000000}, 0x8) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80c00) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) [ 139.635037] XFS (loop3): unknown mount option [noquota]=BÔ ?WÙ;]. 11:49:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_newroute={0x24, 0x18, 0x721, 0x0, 0x0, {}, [@RTA_PREF={0x8}]}, 0x24}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1ff, &(0x7f00000000c0)="92565f27a2a82141fa29af22662023cb396b76f820e7bd8b88c4dd5662d5801b465f5801b5b4bd8971c05367509ae82d28691937daaf71b8d4cc9380ea9fe29b5addf992aa42f5a3cc96f513fc17347bc0eaa09fcc0777aeae7d075d497499f80d6b47b3418c4301a2b6274a5e1882682285a55b7ce604fd130238131eca48b2e8bf9c45dd1474de04496a453b64ad9ac95b6c7b46eb6a63cedebcc6583086f2adffd9bae329cffc18410c09b2c4750337cacd25981d5c1e95a82eb8e6ea8abcef7a038c8e379b1f5b54b93c5ef13b17a96430350027c3841b66d96174cb6d") ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) 11:49:36 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401002b040270fff8", 0xffdf}], 0x0, 0x0) [ 139.993032] device bridge_slave_1 left promiscuous mode [ 140.003004] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.026778] device bridge_slave_0 left promiscuous mode [ 140.039183] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.078017] FAT-fs (loop3): bogus number of directory entries (516) [ 140.087279] FAT-fs (loop3): Can't find a valid FAT filesystem [ 140.204817] device hsr_slave_1 left promiscuous mode [ 140.229501] device hsr_slave_0 left promiscuous mode [ 140.262868] team0 (unregistering): Port device team_slave_1 removed [ 140.298100] team0 (unregistering): Port device team_slave_0 removed [ 140.322834] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 140.341375] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 140.403115] bond0 (unregistering): Released all slaves 11:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x205211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:49:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) close(r2) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x8408, 0x4) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 11:49:36 executing program 0: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000002c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000280)=""/52) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000200)="17c86ee80aed74045b4a", 0xa}]) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) bind$packet(r4, &(0x7f0000000000)={0x11, 0xd, r5}, 0x14) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) 11:49:36 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000014c0), &(0x7f0000001700)=0x30) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) pipe(0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r3) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3}]) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000040)) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000040)) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000040)) io_submit(r4, 0x3, &(0x7f00000016c0)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000001540)="96f8cd69401606e4629fc2dd8004b5b9bc2b873f55f6517b037a1f7171809b3b17576f7418a2c2a275eaa58ee2dcd4bb126742c01adec217c4a201e19b5f7680bd8ca03cc9425652d64338ad22282b686e8d7f3c676fe4bd3ee917f936273e7fe9b5db57f3ff2c9bf91be4aaa22c2277b306e5b706181e34974dd0f9f5f112a33230f9d140b1eebe022bc66047b649c81042a04a3939551ef333", 0x9a, 0x7, 0x0, 0x0, r5}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x2, 0x7f, r6, &(0x7f0000001480)="ec431235653af8d520cf30bf7063faebbf4ad36393507f", 0x17, 0xd1, 0x0, 0x0, r7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f0000001640)="f37ab9026598244b14800e1aac793ede8b786e63edfadf333b48a754404920f69ebf411c444d404c453853cbc1f2a9c318c2a70e8c06be63d8", 0x39, 0x6, 0x0, 0x0, r8}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) writev(r9, &(0x7f0000000080)=[{0x0}], 0x1) writev(r9, &(0x7f000063e000)=[{&(0x7f0000000040)="da", 0x1}], 0x1) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r10, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r10, &(0x7f0000000140)=[{{0x77359400}, 0x15, 0x3d9, 0x9}, {{}, 0x2, 0x4, 0x7fffffff}, {{}, 0x13, 0xff8b, 0x7}, {{r11, r12/1000+10000}, 0x1b, 0x1, 0x78d}], 0x60) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000340)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ec0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r13 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000040)) fstat(r13, &(0x7f00000002c0)) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x6, 0x100) 11:49:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0xd470035b61bf87ee, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xd6c}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="2321202e2f627573206d656d00017937737761532e63757289c942abe3fa72656e7f001a77b7c342eff0d5f3347c982e853759ab5b64fa83dfc6f3b5abbb9879e7ff876fb2fed09d9a89fec41dd27c7abc0a6c25972c23ab3361455718413340947f00591d90f3c8899a2e7f6d35aa08ce6f09cc98b718901c4d910f7a6285bf9345559f6cc44ff03e18edb00d2e38aa92c76377d6afbe1d0424ec416208cfd430e87167b318d18fe644a800f6487c79a10fdee3bb27b10200c870bf5168220a3d90f976556f3985b3a9ecdac299be389f5b2a80b7259d3333b9c3f0112111c3a5243ccf000000001a4fb4f05fbd3ef31bbb5b053801f4caf428ab388752c8e06cce9330ecf58fb02549b77f5b5c69fb9664a16141976ac3efb635c065b2251fbaa90e2416bc77ff2644525970b8db000000000000001869ff4877ea9d860e086c359435abd3ef11bd22bc738bf22e3a8ce2b207ac8b19808ba326191680a188bec300f3b7565d8965f244f654c0b82fa511158c71562f94204ac878b62361a55bbe0fe1f13dddfbcbb0e5fd107778469303634b0db625a60efacd18e01eaec5a2e12a29b75d9983e8c3c1b91d309c98ad526d202000000044c10048206d656d00017937737761532e63757289c942abe3fa72656e74001a77b7c342eff0d5f3347c982e853759ab5b64fa83dfc6f3b5abbb9879e7ff876fb2fed09d9a89fec41d927c7abc0a6c25972c23ab3361455718413340940525591d90f3c8899a2e7f6d35aa08ce6f09cc98b718901c4d910f7a6285b52486e4d91b4a1ff03e18edb00d2e38aa92c76377d6afbe1d0424ec416208cfd430e87167c518d18fe644a800f6487c79a10fdee3bb27b10200c870bf5168220a3d90f976556f3985b3a9ecdac299be389f5b2a80b7259d3333b9c3f0112111c3a5243ccf000000001a4fb4f05fbd3ef31bbb5b053801f4caf428ab388752c8e06cce9330ecf58fb02549b77f5b5c69fb9664a16141976ac3efb635c065b2251fbaa90e2416bc77ff2644525970b8db000000000000001869ff4877ea9d860e086c359435abd3ef11bd22bc738bf22e3a8ce2b207ac8b19808ba326191680a188bec300f3b7565d8965f244f654c0b82fa511158c71562f94204ac878b62361a55bbe0fe1f13dddfbcbb0e5fd107778469303634b0db625a60efacd18e01eaec5a2e12a29b75d9983e8c3c1b91d309c98ad526d206367726f7570206d656d00017937737761532e63757289c942abe3fa72656e74001a77b7c342eff0d5f3347c982e853759ab5b64fa83dfc6f3b5abbb9879e7ff876fb2fed08f9a89fec41d927c7abc0a6c25972c23ab3361455718413340940525591d90f3c8899a2e7f6d35aa08ce6f09cc98b718901c4d910f7a6285b52486e4d91b4a1ff03e18edb00d2e38aa92c76377d6afbe1d0424ec416208cfd430e87167c518d18fe644a800f6487c79a10fdee3bb27b10200c870bf5168220a3d90f976556f3985b3a9ecdac299be389f5b2a80b7259d3333b9c3f0112111c3a5243ccf000000001a4fb4f05fbd3ef31bbb5b053801f4caf428ab388752c8e06cce9330ecf58fb02549b77f5b5c69fb9664a16141976ac3efb635c065b2251fbaa90e2416bc77ff2644525970b8db000000000000001869ff4877ea9d860e086c359435abd3ef11bd22bc738bf22e3a8ce2b207ac8b19808ba326191680a188bec300f3b7565d8965f244f654c0b82fa511158c71562f94204ac878b62361a55bbe0fe1f13dddfbcbb0e5fd107778469303634b0db625a60efacd18e01eaec5a2e12a29b75d9983e8c3c1b91d309c98ad526d0ae32e45885f90b0430ee02a741afea0155382d1a7b0bc12de90bcd2ae341222c26ef5940d1dff326344fd9e4c874df3be17652f9aeab8a47c7f4bf122567239c1327e6d31b2ef4773477998a8435fe9a0a5a7658dd12ae0827b2af51f5210f98f4cb0fbc335176f782ea64961f76bef9af91ff6f311c2a2e739f61a4376a846ebb3d986ef958babae22e3a1626c22c41678b499dc2a898fcdd9c858f92b4ac142dccdf9e0a92f1f671e2cb955e65d733b13411ea4f932b5e2d24d1e6939a5ac335c98eb48c3f6e5f204d9127cb12d9f10b04f13f22d951e458739f0fc4f9fa293b00247c9e51a62bf56c29531ca2b00347ce7e17a8cf420c1e909ce86061d3f48cbdab885bf0c1cb9250924a80211623bef678d20a86e05c9716f167fe5875b2277ec8cd6a24f004f"], 0x627) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='\x00\x00\x00@H') syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x7, 0x8080) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r6 = socket$inet6(0xa, 0x0, 0x0) close(r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x4, 0x9c, 0x10001, 0xfff, 0x1000, 0x530, 0x5}, &(0x7f0000000300)=0x20) openat$cgroup_ro(r4, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) [ 140.668668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 140.712076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 140.752232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 140.804631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 11:49:36 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) [ 140.909207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 140.946077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 11:49:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x4000}) [ 140.988287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 141.021735] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (253) [ 141.048631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 141.066520] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (253) [ 141.115088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 141.156143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7925 comm=syz-executor.5 [ 142.622368] IPVS: ftp: loaded support on port[0] = 21 [ 142.755047] chnl_net:caif_netlink_parms(): no params data found [ 142.815488] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.822357] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.829559] device bridge_slave_0 entered promiscuous mode [ 142.841465] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.847919] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.857098] device bridge_slave_1 entered promiscuous mode [ 142.874099] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.882985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.898211] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.905481] team0: Port device team_slave_0 added [ 142.910927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.917914] team0: Port device team_slave_1 added [ 142.923264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.930476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.949134] device hsr_slave_0 entered promiscuous mode [ 142.954972] device hsr_slave_1 entered promiscuous mode [ 142.960813] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.967601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.979491] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.985879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.992519] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.998865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.024732] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 143.031408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.039231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.047951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.055298] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.062836] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.072982] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.079045] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.088133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.095870] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.102265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.111672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.119211] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.125588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.140915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.148454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.156608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.165289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.178079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.188464] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.194661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.202228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.216963] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.227395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.296861] QAT: Invalid ioctl [ 143.730520] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 11:49:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x4000}) 11:49:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000100)=""/57) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:49:40 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) chown(&(0x7f0000000000)='./file0\x00', r2, r4) listen(r1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11:49:40 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1c0800) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x81}) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x7) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x10000, 0x3}) ioctl$NBD_CLEAR_SOCK(r4, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 11:49:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x51, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38f77fdba040c4d5"], 0x0, 0x8}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x25ad}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000002c0)={r5, r6, 0xfffffffffffffff9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x2, 0x0, 0x0, 0x100000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 11:49:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r2, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10802010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x15c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfd8e0cdc}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe71c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa1}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @loopback, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 11:49:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="ae", 0x1}], 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x4000}) [ 144.209385] block nbd5: Receive control failed (result -22) [ 144.226563] block nbd5: shutting down sockets [ 144.233347] [ 144.234998] ============================================ [ 144.240438] WARNING: possible recursive locking detected [ 144.245890] 4.14.151 #0 Not tainted [ 144.249610] -------------------------------------------- [ 144.255052] kworker/u5:1/7985 is trying to acquire lock: [ 144.260488] ("knbd%d-recv"nbd->index){+.+.}, at: [] flush_workqueue+0xda/0x1400 [ 144.269600] [ 144.269600] but task is already holding lock: [ 144.275569] ("knbd%d-recv"nbd->index){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 144.284857] [ 144.284857] other info that might help us debug this: [ 144.291516] Possible unsafe locking scenario: [ 144.291516] [ 144.297566] CPU0 [ 144.300141] ---- [ 144.302715] lock("knbd%d-recv"nbd->index); [ 144.307122] lock("knbd%d-recv"nbd->index); [ 144.311522] [ 144.311522] *** DEADLOCK *** [ 144.311522] [ 144.317572] May be due to missing lock nesting notation [ 144.317572] [ 144.324516] 3 locks held by kworker/u5:1/7985: [ 144.329083] #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 144.338796] #1: ((&args->work)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 144.347773] #2: (&nbd->config_lock){+.+.}, at: [] refcount_dec_and_mutex_lock+0x49/0x6c [ 144.357668] [ 144.357668] stack backtrace: [ 144.362168] CPU: 0 PID: 7985 Comm: kworker/u5:1 Not tainted 4.14.151 #0 [ 144.368915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.378280] Workqueue: knbd5-recv recv_work [ 144.382638] Call Trace: [ 144.385239] dump_stack+0x138/0x197 [ 144.388871] __lock_acquire.cold+0x2bf/0x8dc [ 144.393370] ? trace_hardirqs_on+0x10/0x10 [ 144.397717] ? debug_smp_processor_id+0x1c/0x20 [ 144.402578] ? perf_trace_lock_acquire+0x10d/0x4f0 11:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000), 0x0) 11:49:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x6, {0x1f, 0x8, 0x3a, 0x5c18a125}}) [ 144.407660] ? perf_trace_lock+0x500/0x500 [ 144.408139] kobject: 'loop4' (ffff8880a4ab2120): kobject_uevent_env [ 144.411896] lock_acquire+0x16f/0x430 [ 144.411903] ? flush_workqueue+0xda/0x1400 [ 144.411910] flush_workqueue+0x109/0x1400 [ 144.411915] ? flush_workqueue+0xda/0x1400 [ 144.411920] ? drain_workqueue+0x27/0x3e0 [ 144.411926] ? lock_downgrade+0x740/0x740 [ 144.411931] ? flush_work+0x730/0x730 [ 144.411941] drain_workqueue+0x177/0x3e0 [ 144.411946] ? drain_workqueue+0x177/0x3e0 [ 144.411951] ? mark_held_locks+0xb1/0x100 11:49:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1000}, {r0, 0x8c4}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000300)={0x3e}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xce1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f00000004c0)={0x3a, 0x0, 0x6e}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000340)) ptrace$getsig(0x18, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/d\x1ap#\x00', 0x6, 0x26400) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x5, 0x28a, 0x3, 0x9, 0x2c, 0x2, 0x3ff, {r1, @in6={{0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0xa}, 0x8}}, 0x4, 0x15, 0xffffffff, 0x8}}, &(0x7f00000003c0)=0xb0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000240)=0x1000, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000380)={'nr0\x00', 0x8}) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0xfc10, &(0x7f0000000640)=0xfffffffffffffffd) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588aa64af1d359197c88281c9a24e930eb967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07eb604758044ab4ea6", 0x4d, 0xe, 0x0, 0x0) clock_settime(0x0, 0x0) 11:49:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x100000000}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_open_dev$cec(0x0, 0x2, 0x2) dup3(0xffffffffffffffff, r3, 0x0) write$selinux_load(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578698395d771139ef4c3e8ef91c5a51234e3735d3ba7eb5493d341776f26f22b673fe17a770b66f5326d73e75f162043f000e2512a041be2a987de0a1b71da0fb36fd7bf040000004683453c3a9da8bf7c5e8c657656c5be2a739dba75301dd8e37adb657cf8ba485765ae833e5b1579af6ed3f601a5c5b202e03711fb5d5d4eaac946c58ae724aad79a4a7040fe98f37799503440eb86ad92872e28493a9201b8fa4c7ccc0000"], 0xb6) vmsplice(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) r6 = socket(0x11, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r7, 0x88, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x2000000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e20, 0x1000, @ipv4={[], [], @local}, 0x400}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={r8, 0x8, 0x8, [0xffc0, 0x5, 0x8, 0x100, 0x1, 0x1, 0x6, 0x22]}, 0x18) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0xe2a41745f501305) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000140)={0x4, "476374cc8f990e647f6af6c7d040a5a5f251df4da367e2f6f49921d8a109e821", 0x400, 0x9, 0x9a51, 0x10, 0x2}) fcntl$setstatus(r9, 0x4, 0x0) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r10, 0x800002, 0x0) write$binfmt_elf64(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10c) fallocate(r10, 0x3, 0x0, 0x8020003) writev(r10, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) [ 144.411956] ? kfree+0x183/0x270 [ 144.411966] destroy_workqueue+0x21/0x620 [ 144.429799] kobject: 'loop4' (ffff8880a4ab2120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 144.431322] ? trace_hardirqs_on+0xd/0x10 [ 144.431331] nbd_config_put+0x43c/0x7a0 [ 144.431338] recv_work+0x18d/0x1f0 [ 144.431347] process_one_work+0x863/0x1600 [ 144.431355] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 144.431363] worker_thread+0x5d9/0x1050 [ 144.431374] kthread+0x319/0x430 [ 144.431379] ? process_one_work+0x1600/0x1600 11:49:40 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='key\x81ing\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, 0x0, 0x0, r1) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x3c, 0x0) keyctl$get_persistent(0x16, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000580)="6d4778e5c52d5b4eca6f005b48e7838f120e58125f77250d9be4b8456c5f82b32f6d8494c959232438b192b4b1052e76d8c1f9b90d0319367df96461579bd834314a8a3a60a4e3e9d8938e859356f51b6b9382aaf85f263746d977e272af44f4917c086e8aea3bab17a62f03d8b684ce954ed68618435a494208fb84eab60bf97196a91c1a222b89f2fd0ae6628d68", 0x8f, r1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfe81}], 0x0, 0x0) 11:49:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@local}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYPTR, @ANYBLOB="02c4f8ae740e4eb0a81056d9324f756da62b95ba0e28a0532738b9f1878aa9d701384d9ecfeda2d9d44d5b5b41e5bf2d6b91c8a769029ab9ee0f62d32a8d1e0380fc6bfef92daccc449b1116f68f698707e4f4c8272afa8e3be795b5bcafe00fb24ebdf48f78820138650a02d2d3288927289696c46d2cc43cb72584294607aa638e1e50deb76e791a1017", @ANYRES16=r1, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=r2]], 0x5}}, 0x800) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0d788812d7934a0, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x4040) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x4, 0x3c122ab7, 0x3, 0x1, 0x1}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x4}, 0x8) pkey_alloc(0x0, 0x1) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r7) [ 144.431384] ? kthread_create_on_node+0xd0/0xd0 [ 144.431391] ret_from_fork+0x24/0x30 11:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) getsockname(0xffffffffffffffff, 0x0, 0x0) write$nbd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000fcff0100000000006517a42ac4cb7a63d1a97a7e6d06589e03469637a7267592938766010a35efd29affe2009efdc31a381587a53c0d00000000000003e9e841e84f03d05ebc7e87c10dfc8b2cf1fd86fbcd578bcd3e51a594acdea573d84d62215d3e9e1c3ce9db868d4ee3bc0b06f8865611d9e5a0a652c1a8cf8d285e1629b0e097e78390c268b4919ba00c2f81d8ebc88648339483572c6f66943bc0347fc1aa918f1383e456de840a334085ee5ad56dbd8d027120d49deb92c530d75197d928a5f717d65887ff134d67670425"], 0x74) keyctl$setperm(0x5, 0x0, 0x202002) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) r4 = socket(0x40000000015, 0x5, 0x0) close(r4) r5 = socket(0x11, 0x2, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xb07, 0x122b, 0xc9b, 0x0, 0x4, 0x0, 0x2, {r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0xd3, 0xfffffffd, 0x1ff, 0x477, 0x8a6f}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r7, 0x7035, 0x9, 0x93cf}, 0x10) keyctl$link(0x8, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000200), 0xa198) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000040)) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 11:49:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1000}, {r0, 0x8c4}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000300)={0x3e}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xce1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f00000004c0)={0x3a, 0x0, 0x6e}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000340)) ptrace$getsig(0x18, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/d\x1ap#\x00', 0x6, 0x26400) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x5, 0x28a, 0x3, 0x9, 0x2c, 0x2, 0x3ff, {r1, @in6={{0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0xa}, 0x8}}, 0x4, 0x15, 0xffffffff, 0x8}}, &(0x7f00000003c0)=0xb0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000240)=0x1000, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000380)={'nr0\x00', 0x8}) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0xfc10, &(0x7f0000000640)=0xfffffffffffffffd) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588aa64af1d359197c88281c9a24e930eb967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07eb604758044ab4ea6", 0x4d, 0xe, 0x0, 0x0) clock_settime(0x0, 0x0) [ 144.693527] kobject: 'loop0' (ffff8880a49a2e60): kobject_uevent_env [ 144.714926] kobject: 'loop0' (ffff8880a49a2e60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 144.724980] kobject: 'loop3' (ffff8880a4a7b1e0): kobject_uevent_env [ 144.731542] kobject: 'loop3' (ffff8880a4a7b1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 144.741881] kobject: 'loop0' (ffff8880a49a2e60): kobject_uevent_env [ 144.748363] kobject: 'loop0' (ffff8880a49a2e60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 144.761345] kobject: 'loop1' (ffff8880a49deee0): kobject_uevent_env [ 144.767814] kobject: 'loop1' (ffff8880a49deee0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.777983] kobject: 'loop0' (ffff8880a49a2e60): kobject_uevent_env [ 144.784544] kobject: 'loop0' (ffff8880a49a2e60): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 144.795071] kobject: 'loop1' (ffff8880a49deee0): kobject_uevent_env [ 144.801598] kobject: 'loop1' (ffff8880a49deee0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.811767] kobject: 'loop3' (ffff8880a4a7b1e0): kobject_uevent_env [ 144.818251] kobject: 'loop3' (ffff8880a4a7b1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 144.828488] kobject: 'loop1' (ffff8880a49deee0): kobject_uevent_env [ 144.834996] kobject: 'loop1' (ffff8880a49deee0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.848853] kobject: 'loop3' (ffff8880a4a7b1e0): kobject_uevent_env [ 144.862326] kobject: 'loop3' (ffff8880a4a7b1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 144.941746] kobject: 'kvm' (ffff888219fdd610): kobject_uevent_env [ 144.968942] kobject: 'kvm' (ffff888219fdd610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 144.989370] kobject: 'kvm' (ffff888219fdd610): kobject_uevent_env [ 144.997035] kobject: 'kvm' (ffff888219fdd610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 145.017016] kobject: 'kvm' (ffff888219fdd610): kobject_uevent_env [ 145.023921] kobject: 'kvm' (ffff888219fdd610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 145.038199] kobject: 'loop2' (ffff8880a4a40f60): kobject_uevent_env [ 145.044894] kobject: 'loop2' (ffff8880a4a40f60): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 145.078432] kobject: 'loop0' (ffff8880a49a2e60): kobject_uevent_env [ 145.085344] kobject: 'loop0' (ffff8880a49a2e60): fill_kobj_path: path = '/devices/virtual/block/loop0'