, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0)=[{r1, 0x2001}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") poll(&(0x7f0000000040)=[{}], 0x20000000000000e3, 0x0) 20:17:30 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) prctl$PR_GET_FP_MODE(0x2e) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 201.162354][ T8342] libceph: resolve '.u [ 201.162354][ T8342] ' (ret=-3): failed [ 201.165249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 201.176091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 201.190706][ T8330] libceph: resolve '.u [ 201.190706][ T8330] ' (ret=-3): failed [ 201.199323][ T8342] libceph: parse_ips bad ip '.u [ 201.199323][ T8342] :d]:.,[' [ 201.205119][ T8330] libceph: parse_ips bad ip '.u [ 201.205119][ T8330] :d]:.,[' 20:17:31 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000780), &(0x7f00000007c0)=0x10) syz_open_dev$sndpcmc(0x0, 0x3d, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20b, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x0, 0xffffffff00000001, 0x8000, 0x18a, 0x14d, 0x3, 0x24f, 0x3}, "", [[], [], []]}, 0x320) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x176) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000900), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b40)={0x200, 0x0, 0x8, [{{0x0, 0x0, 0x7, 0x8, 0x0, 0x0, {0x6, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0xb85, 0x3, 0x3, 0x8001, 0x5a4, r3, r4, 0x1000, 0x8000}}, {0x4, 0x72bf8be9, 0xc, 0x8, '/dev/video#\x00'}}, {{0x3, 0x3, 0x8, 0x9, 0x57ea, 0x40, {0x4, 0x10001, 0x7fffffff, 0x100000001, 0xa6de, 0xfffffffffffffb2d, 0x2, 0x0, 0x0, 0x0, 0x1, r5, r6, 0x7, 0x8}}, {0x2, 0xffff, 0x11, 0x10000, '/dev/dlm-control\x00'}}, {{0x3, 0x2, 0x40, 0x6, 0x0, 0x287, {0x3, 0x19, 0x5, 0x6, 0x2, 0x2, 0x2, 0x3ff, 0x6, 0xfffffffffffffffb, 0xefe9, r7, r8, 0x8, 0xfff}}, {0x3, 0x6, 0x0, 0x8000}}]}, 0x200) mount(&(0x7f0000000040)=@nullb='.u\n:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000500)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 20:17:31 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x2, 0x370, [0x200003c0, 0x0, 0x0, 0x20000590, 0x20000700], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x8, 0x0, 'vlan0\x00', 'batadv0\x00', 'gretap0\x00', 'veth1\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @random="79ba647cfbe5", [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9a2, 'system_u:object_r:tape_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'veth0_to_hsr\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000], @remote, [0xff, 0x0, 0x0, 0xfb, 0xfffffffffffffffe], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3e8) 20:17:31 executing program 3: set_mempolicy(0x4000, &(0x7f0000000040)=0x80005, 0x4000008000100) 20:17:31 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:31 executing program 4: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000780), &(0x7f00000007c0)=0x10) syz_open_dev$sndpcmc(0x0, 0x3d, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20b, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x0, 0xffffffff00000001, 0x8000, 0x18a, 0x14d, 0x3, 0x24f, 0x3}, "", [[], [], []]}, 0x320) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x176) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000900), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b40)={0x200, 0x0, 0x8, [{{0x0, 0x0, 0x7, 0x8, 0x0, 0x0, {0x6, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0xb85, 0x3, 0x3, 0x8001, 0x5a4, r3, r4, 0x1000, 0x8000}}, {0x4, 0x72bf8be9, 0xc, 0x8, '/dev/video#\x00'}}, {{0x3, 0x3, 0x8, 0x9, 0x57ea, 0x40, {0x4, 0x10001, 0x7fffffff, 0x100000001, 0xa6de, 0xfffffffffffffb2d, 0x2, 0x0, 0x0, 0x0, 0x1, r5, r6, 0x7, 0x8}}, {0x2, 0xffff, 0x11, 0x10000, '/dev/dlm-control\x00'}}, {{0x3, 0x2, 0x40, 0x6, 0x0, 0x287, {0x3, 0x19, 0x5, 0x6, 0x2, 0x2, 0x2, 0x3ff, 0x6, 0xfffffffffffffffb, 0xefe9, r7, r8, 0x8, 0xfff}}, {0x3, 0x6, 0x0, 0x8000}}]}, 0x200) mount(&(0x7f0000000040)=@nullb='.u\n:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000500)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 20:17:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) prctl$PR_GET_FP_MODE(0x2e) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:31 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000005d40)={0x0, 0x10000}, &(0x7f0000006140)=0x8) flistxattr(0xffffffffffffffff, 0x0, 0x37d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[]}}, 0x4000) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x2) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000600)) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x0, [], 0x0}) [ 201.764326][ T8364] libceph: resolve '.u [ 201.764326][ T8364] ' (ret=-3): failed 20:17:31 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10800, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000200)=""/4096) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x1) 20:17:31 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 201.848806][ T8367] libceph: resolve '.u [ 201.848806][ T8367] ' (ret=-3): failed [ 201.858367][ T8364] libceph: parse_ips bad ip '.u [ 201.858367][ T8364] :d]:.,[' 20:17:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) prctl$PR_GET_FP_MODE(0x2e) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:31 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 201.927359][ T8367] libceph: parse_ips bad ip '.u [ 201.927359][ T8367] :d]:.,[' 20:17:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xcc, r1, 0x18, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x42}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x810) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e24, 0x6ff, @remote, 0x4}, 0xdbb, [0x3, 0x6, 0x4, 0xa8, 0x3ff, 0x80, 0x12ff, 0x100000000]}, 0x5c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000704fcff", 0x58}], 0x1) 20:17:31 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000780), &(0x7f00000007c0)=0x10) syz_open_dev$sndpcmc(0x0, 0x3d, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20b, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x0, 0xffffffff00000001, 0x8000, 0x18a, 0x14d, 0x3, 0x24f, 0x3}, "", [[], [], []]}, 0x320) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x176) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000900), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b40)={0x200, 0x0, 0x8, [{{0x0, 0x0, 0x7, 0x8, 0x0, 0x0, {0x6, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0xb85, 0x3, 0x3, 0x8001, 0x5a4, r3, r4, 0x1000, 0x8000}}, {0x4, 0x72bf8be9, 0xc, 0x8, '/dev/video#\x00'}}, {{0x3, 0x3, 0x8, 0x9, 0x57ea, 0x40, {0x4, 0x10001, 0x7fffffff, 0x100000001, 0xa6de, 0xfffffffffffffb2d, 0x2, 0x0, 0x0, 0x0, 0x1, r5, r6, 0x7, 0x8}}, {0x2, 0xffff, 0x11, 0x10000, '/dev/dlm-control\x00'}}, {{0x3, 0x2, 0x40, 0x6, 0x0, 0x287, {0x3, 0x19, 0x5, 0x6, 0x2, 0x2, 0x2, 0x3ff, 0x6, 0xfffffffffffffffb, 0xefe9, r7, r8, 0x8, 0xfff}}, {0x3, 0x6, 0x0, 0x8000}}]}, 0x200) mount(&(0x7f0000000040)=@nullb='.u\n:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000500)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 20:17:32 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000780), &(0x7f00000007c0)=0x10) syz_open_dev$sndpcmc(0x0, 0x3d, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20b, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x0, 0xffffffff00000001, 0x8000, 0x18a, 0x14d, 0x3, 0x24f, 0x3}, "", [[], [], []]}, 0x320) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x176) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000900), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b40)={0x200, 0x0, 0x8, [{{0x0, 0x0, 0x7, 0x8, 0x0, 0x0, {0x6, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0xb85, 0x3, 0x3, 0x8001, 0x5a4, r3, r4, 0x1000, 0x8000}}, {0x4, 0x72bf8be9, 0xc, 0x8, '/dev/video#\x00'}}, {{0x3, 0x3, 0x8, 0x9, 0x57ea, 0x40, {0x4, 0x10001, 0x7fffffff, 0x100000001, 0xa6de, 0xfffffffffffffb2d, 0x2, 0x0, 0x0, 0x0, 0x1, r5, r6, 0x7, 0x8}}, {0x2, 0xffff, 0x11, 0x10000, '/dev/dlm-control\x00'}}, {{0x3, 0x2, 0x40, 0x6, 0x0, 0x287, {0x3, 0x19, 0x5, 0x6, 0x2, 0x2, 0x2, 0x3ff, 0x6, 0xfffffffffffffffb, 0xefe9, r7, r8, 0x8, 0xfff}}, {0x3, 0x6, 0x0, 0x8000}}]}, 0x200) mount(&(0x7f0000000040)=@nullb='.u\n:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000500)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 20:17:32 executing program 3: r0 = getpgrp(0x0) ioprio_get$pid(0x3, r0) [ 202.044974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 202.050845][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) prctl$PR_GET_FP_MODE(0x2e) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) [ 202.248917][ T8406] libceph: resolve '.u [ 202.248917][ T8406] ' (ret=-3): failed [ 202.273740][ T8406] libceph: parse_ips bad ip '.u [ 202.273740][ T8406] :d]:.,[' 20:17:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x440, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @rand_addr=0x3}], 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x0, 0x0, 0x0) mq_getsetattr(r2, 0x0, &(0x7f0000356000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 20:17:32 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:32 executing program 5: r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'hwsim0\x00', {0x2, 0x4e20, @rand_addr=0x6}}) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000d061f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 20:17:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="230e9cd1a3999f6aa58b0e3cbf708ffc", 0x10}], 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @ipv4={[], [], @rand_addr=0x30}, 0xfffffffffffffffb}, 0x1c) 20:17:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) dup2(r0, r0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x2, 0xc1b) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r3 = socket$inet(0x10, 0x3, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0xeb, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x7, 0x0, 0x3, 0x8}, &(0x7f0000000200)={0x200, 0x0, 0xfffffffffffffe01, 0x0, 0x5, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000680)=0x0) r6 = fcntl$getown(r3, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000700), 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000007c0)={{0x6, 0x1}, 'port0\x00', 0x81, 0x61800, 0x1ff, 0xfffffffeffffffff, 0xffffffffffffffff, 0x100000001, 0x9, 0x0, 0x2, 0x4}) kcmp(r5, r6, 0x4, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000005c0)) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000c40)=ANY=[@ANYPTR64]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000440)=[0x0]) [ 202.574341][ T8420] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:17:32 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 202.633762][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 202.684955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 202.690773][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00\x86o\x9br\xcc&p:4\x96\x1dn\x17B\x00\xbccT\x8c\f2b\xd8\x80\xf8\x19\tq>\x95\x04\xd2io\t\xbb\x14\xd5o\xa8\x92\t\xe2\x9a\x9d\x8e\xb4\xc8\x7f\x00\x00\x00cU)\xae\x8f0x0) r6 = fcntl$getown(r3, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000700), 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000007c0)={{0x6, 0x1}, 'port0\x00', 0x81, 0x61800, 0x1ff, 0xfffffffeffffffff, 0xffffffffffffffff, 0x100000001, 0x9, 0x0, 0x2, 0x4}) kcmp(r5, r6, 0x4, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000005c0)) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000c40)=ANY=[@ANYPTR64]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000440)=[0x0]) 20:17:32 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x9f0000, 0x80000000, 0x7f, [], &(0x7f0000000100)={0x9e0907, 0x9, [], @string=&(0x7f00000000c0)=0xe2}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) read(r1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000180)=@rc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/56, 0x38}, {&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f0000000600)=""/168, 0xa8}], 0x8, &(0x7f0000000740)=""/203, 0xcb}, 0x100) 20:17:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:33 executing program 5: r0 = socket$kcm(0x2, 0x80000000002, 0x73) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='setgroups\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0xc801, 0x0) close(r1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/116, &(0x7f00000000c0)=0x74) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0xf, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) 20:17:33 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x1000) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180), 0x126, 0x0, 0xffffff4a}, 0x4) 20:17:33 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 203.244949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 203.262628][ T26] audit: type=1804 audit(1553199453.205:31): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/20/file0/bus" dev="ramfs" ino=29927 res=1 [ 203.576799][ T26] audit: type=1804 audit(1553199453.525:32): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/20/file0/file0/bus" dev="ramfs" ino=29307 res=1 20:17:33 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000b40)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) dup3(r0, r0, 0x80000) lseek(r0, 0x1c, 0x1) 20:17:33 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 20:17:33 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@initdev, @multicast2, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lapb0\x00', r1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000300)='gre0\x00') [ 203.598871][ T26] audit: type=1800 audit(1553199453.525:33): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=29307 res=0 20:17:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 203.675849][ T8504] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 20:17:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xc, &(0x7f0000000240)={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) 20:17:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000b40)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) dup3(r0, r0, 0x80000) lseek(r0, 0x1c, 0x1) 20:17:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:33 executing program 3: r0 = socket(0x13, 0x5, 0x800) write(r0, &(0x7f0000000040)="24000000200005fb006b000420edea20021900080110b5000010ffea08000100010000b7", 0x24) [ 204.154176][ T26] audit: type=1804 audit(1553199454.095:34): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/21/file0/bus" dev="ramfs" ino=30081 res=1 20:17:34 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:34 executing program 0: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x100) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000600)=""/55, &(0x7f0000000780)=0x37) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000000540)={&(0x7f00000004c0)={0x34b, r1, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x20, 0x8, 0x0, 0x4ce}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x159) r2 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x11c, 0xe, 0xb, 0x500, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x6}, [@nested={0xfc, 0xe, [@typed={0x8, 0x92, @uid=r2}, @typed={0x8, 0x5f, @str='\x00'}, @generic="bf", @generic="fa0ac3aa5870acfed611c7c45d3ae44f80f3cc63c85948d60326b03da6d8358626d093142bff0656204eb611a42ed67aaf1e946291f35425359f95cb48c1a88355ed6d3d202b27416c5f6414c664e3a31cba1a577df78e73b46b67d700c7ea840673142dbf3cab81f85563cfa26f7e5892c894c790a6dd1e2e8c8c58901251b8c3ee4de0589cdc26201b8bdf34e8dc5cd32cee6965b19c814bb30086fe3b536d34c0313e92fccee3915105f187cb326ca15db9a36d6d65ae31e8216b1c8477fe9d5af20d6c603c5b35e7236044e7168c04cc53686ba14d0780174553bd238062a76e4cbdd7"]}, @typed={0xc, 0x32, @u64=0x2}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r3 = getpgrp(0x0) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockname$packet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000680)=""/249) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000440)='security.capability\x00'], 0x0) 20:17:34 executing program 3: bpf$MAP_CREATE(0x6, &(0x7f0000000140), 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r0, 0x203, &(0x7f0000000180)={&(0x7f0000000040)="09f5365cc6edf7f1ec8f6cb520b1b0994ee0ceca66d77782cc06c188f917b3f72468f00baeea8090c4a0085ee4d1356dd0f7f1c834d3ef5f905d396505156f30493be048fa5f19ba827511ca798d8d5bd3e01aac08eb8e083b03fd795991dcb4f6f6142ba36a8d5be2d2453ba7e4b8bebcf80c91f52d5b16a62dba4de178b8bafea6741a47d5d9d46c2775d7c495c1ad62884e805427bbf78a067c1073121b63e56e74edaddec6e289932019fa44acfe743cf0f161b7069cc85c03a5e65ca3233aa23b8b0006e1bb4763bb8fbb2ee396c1d6b92998dd1b9e038b25bae7aa2c0a4b91", 0xe2}) 20:17:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) futex(&(0x7f000000cffc), 0x8, 0x0, 0x0, 0x0, 0x0) [ 204.666645][ T26] audit: type=1804 audit(1553199454.615:35): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/22/file0/bus" dev="ramfs" ino=29452 res=1 20:17:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002702) 20:17:34 executing program 0: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x100) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000600)=""/55, &(0x7f0000000780)=0x37) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000000540)={&(0x7f00000004c0)={0x34b, r1, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x20, 0x8, 0x0, 0x4ce}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x159) r2 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x11c, 0xe, 0xb, 0x500, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x6}, [@nested={0xfc, 0xe, [@typed={0x8, 0x92, @uid=r2}, @typed={0x8, 0x5f, @str='\x00'}, @generic="bf", @generic="fa0ac3aa5870acfed611c7c45d3ae44f80f3cc63c85948d60326b03da6d8358626d093142bff0656204eb611a42ed67aaf1e946291f35425359f95cb48c1a88355ed6d3d202b27416c5f6414c664e3a31cba1a577df78e73b46b67d700c7ea840673142dbf3cab81f85563cfa26f7e5892c894c790a6dd1e2e8c8c58901251b8c3ee4de0589cdc26201b8bdf34e8dc5cd32cee6965b19c814bb30086fe3b536d34c0313e92fccee3915105f187cb326ca15db9a36d6d65ae31e8216b1c8477fe9d5af20d6c603c5b35e7236044e7168c04cc53686ba14d0780174553bd238062a76e4cbdd7"]}, @typed={0xc, 0x32, @u64=0x2}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r3 = getpgrp(0x0) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockname$packet(r4, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000680)=""/249) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000440)='security.capability\x00'], 0x0) 20:17:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:34 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000500)={0x3, 0x100000000}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x198, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x244}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1aba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x84) socket$netlink(0x10, 0x3, 0x0) signalfd4(r1, &(0x7f0000000480)={0x8}, 0x8, 0x80000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r2, r5, 0x0, 0x8000ffffffff) ftruncate(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f00000000c0)={{0x0, 0x4}, 'port1\x00', 0x80, 0x424, 0x9, 0x80000001, 0x3ff, 0x3f, 0x4, 0x0, 0x1, 0x3ff}) renameat2(r5, &(0x7f0000000000)='./bus\x00', r5, &(0x7f0000000040)='./bus\x00', 0x2) [ 204.828134][ T8596] Unknown ioctl 1074310931 [ 204.918908][ T8596] Unknown ioctl 1074310931 20:17:35 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbef}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffff358}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x43}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getgid() ioctl$sock_SIOCETHTOOL(r3, 0x8970, &(0x7f0000000040)={'gretap0\x00', 0x0}) close(r3) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0xd2, 0xffffffffffff607b, 0xc180, 0x4, 0x1, 0x7, 0x360326b0}, 0x1c) close(r1) 20:17:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:35 executing program 3: socketpair$unix(0x1, 0x810000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x87, 0x200) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0x1, 0x102, 0x4, {0x101, 0x81, 0x4, 0x2fe57a81}}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x61}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x32a, 0x0) 20:17:35 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffec4, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff220900a2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdffff00000000140081000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 20:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:35 executing program 0: waitid(0x0, 0x0, 0x0, 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x30c}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x5, 0x8, 0x0, 0x0, 0xffff}, 0x20) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x823, 0xde7, 0x0, 0x8]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x0, 0x2, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r3, &(0x7f0000000140), 0x2b6, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) unshare(0x10000000) 20:17:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:35 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r0, 0x80000000005008, 0x0) 20:17:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002702) [ 205.565953][ T26] audit: type=1804 audit(1553199455.515:36): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/23/file0/bus" dev="ramfs" ino=30237 res=1 20:17:35 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:17:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b80)=0x0) getresuid(&(0x7f0000000bc0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) r4 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0}, &(0x7f0000000cc0)=0xc) fstat(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002940)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002980)={0x0, 0x0}, &(0x7f00000029c0)=0xc) lstat(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000006580)=0x0) r12 = getuid() stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpid() lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002c80), &(0x7f0000002cc0)=0x0, &(0x7f0000002d00)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000030c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003100)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000003200)=0xe8) getgroups(0xa, &(0x7f0000003240)=[0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0xee00, 0xee00, 0x0]) r20 = fcntl$getown(r1, 0x9) fstat(r0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003300)={0x0, 0x0, 0x0}, &(0x7f0000003340)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000006640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004600)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000004700)=0xe8) getgroups(0xa, &(0x7f0000004740)=[0xee00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01]) r26 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000006180)=0x0, &(0x7f00000061c0), &(0x7f0000006200)) stat(&(0x7f0000006240)='./file0\x00', &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000063c0)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000300)="ffd8c31a4379d4c4baaaf40077f373d39e9673d3", 0x14}, {&(0x7f0000000340)="09882d6379e718c6fd657db20dfe0c5f3bcd711430fb86701adef227cc5c0c30cdc194ba737a56036c7d95f65a44cd429ef912a5957849e2f335fc9ab8dbf2c90bce552ca866b08bae742c5ed7fceb61e2640215f2033c886719385189ec685f2fda5f19534d157737abc4f2c139b455d2d390fb2e51d953357fec6655db5eb53ec4c638ad3c8d8b512b572db7fc2111c5844f7b7257c6c37809678777c9f53477e10adf81bc", 0xa6}, {&(0x7f0000000400)="ad7832b8d01d87251cd5d70b5d921882275e2c13d342d60a723e37f34ff6e5bc0775733663e409bd0f11f9bd9a6ba9f0fad25fa3eb34d0cb5a0317e1b45d4f48ab2daebbbd698c9cae45c4fb29617668f2f4be077621c51e3699cbb84dc7457ea4f20ab2b63f53aed9e2793692c6", 0x6e}, {&(0x7f0000000880)="0daef02db5fcef233936767439a2e90c8f11d439baa9aa94055f01aef85f550ab8cacae4a8516b184809557a675dce22b1c637508014bccf9c1340a976090ffae982d46cb6929b5fe92046eb7de2ff0326d21c0da7e37bf7", 0x58}, {&(0x7f0000000900)="a33de773eabd9ef5ae0dfebad5b633ed8667aa8c4fbaa1ad9763379de02903933e04b49261", 0x25}, {&(0x7f0000000940)="382aa6fbd40abbaffa03b4696869a89c8174a8bdec4123e3db7f373ac1d8f72bcbfcb6e34bc902acb48727baa5afb56fcc6d730ce0785279e59477dded047aea0cbd7b1b2a48dddfc3e5d28a4196cfa2b21b7a4943823a670b2c4314aaca76555a2a9a129000cdef337755f8ecfd207b5fc3ec362fd7788e3ff653fd8cd51585aabe626e308e4abc", 0x88}, {&(0x7f0000000a00)="af4738332750f8e5c5159fef12389ecd1b39bffb81c4a144355001940def750c5f2dcdd30d44b86d0c160c498049ee3afc6495843212f68a9dea3316fa5870746f8dacf681e0ccf15f0d741a1bcc5c98c0f22bf32f293d75a510b151a37ba7a96408e117e3c2f0abf8cc7b4bab37685ae089e9727d9f606e05f20cd26943cab329bfbf14f4749a0d0afee9fcbfec826acda1baf29504e0a4831d069471f952b6e2ffb49a30e020cf897346f7538507bca6a60c0490cd82ac37d219258e0670e6a2351bbc770b1d83006ba5bb34a5865edcf2", 0xd2}, {0xfffffffffffffffe}], 0x8, &(0x7f0000000d80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x20000014}, {&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000e40)="3ef37a14fcbe6f65deff53ecd44a2f0ad6a4a5e2c597488e6cdfef6f483a7265a4637f636aa9c160b8cc7d3b9d2337ddbb159943eb8e546e45a55003ff2ce9d2e809aa6fb2009bdbfcb31dd2abfb8b145c", 0x51}, {&(0x7f0000000ec0)="d1c61394377d914f21c3feb31d3da2064d7be04ddaad12419480aa06366df41e30e83cce826ef474d7ff3de85c9b61462b38aee0c5a09f9ea9493ddfdba540a7347dbb30940c6148b99bf3051f8c60d6ac6392bb0248df2da3f5a2b119570a2655b5385aefc7459a658f0d40a57f9d7706de7662e45cc984094d4329c59b80ea14c0b1a9069f2b0c87dd613042afd7c7dfb05cfc02a060ede91736e4cea6ba5d090fcafa42a26350498e3bd66b06c103958bcfb39d9143bf3ed5e38563cef348032f35c45ecafc7467340d1b40057b1d70048e9c8c", 0xd5}, {&(0x7f0000000fc0)="f4f2f9d5", 0x4}, {&(0x7f0000001000)="c920781a9410ff05b163ed1c1ca3d0b48855232d228a7e654b85c4ce2e08380a3f7da175a83a2981f0e0efb4f82072cf8a561bb44e919b13158133ba88500771b901a5eb54bc675908c3744d9c6643e10e39fc44d58e7499e8a4013db38d6d4cb3e9a6e05745cd82b6816c39e9d7a7208c526be615101ef5d3c658fc620a12993240f02e45e4c108f421188fafbc174107e54138a328918137306970b1c4c28532e8ff302d44e41064b5e96e13b339e2773e9ac86e4fadac309c555f0e6815c8fc56e621439e38bb1c65f535b9e53a4c7692af9529d6346b71e9e176ce33bf29c4fac0356ba42a6fc506b1b7333d4b360072", 0xf2}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000001100)="e0820c0a36b3357032adbe8e049249c3952c4458ae4fff5833014f0df45a417be96403e1c673a49a8901f266594851fd88bd78acad540cfe", 0x38}, {&(0x7f0000001140)="be529d54b201d210db80e3d4fd47a956dc71669b468cb3c08d7fac88fe31feed3ed2446041526b9f5f3978566d0729574f7fb93ba2382a32eac9687b33b9d5289231e8ecfefb849b9835c2db5e97974e386e92274921c1953f5632bbcfdc3d78fd540827be54dbd99fb5ba83f8f556d6752255f1ebf63198bb701330bd1d1a71943cb7033431cd8d26dac1d768cb73833ead347d96bcf9754483f1c5d648579f6919500446a22f370e11314313ff4e28201f231e1e3b89be583590f224d18ae48a8f547e5e18db0c496eb7310e7453a8844afc10d41aa266c91b", 0xda}, {&(0x7f00000035c0)="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", 0x1000}], 0x8, 0x0, 0x0, 0x801}, {&(0x7f00000012c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001340)="f60a3ace08b52c282177ef799a5ebcdf810655bfc0eb315475a74c537b442e9a", 0x20}, {&(0x7f0000001380)="4eee849009cf75f2630cd77bbfdc8f5784444b48ebf813b9826538e4d3084201c5606eaa6e708f0fded9d6f4ce6776ae1461419ff2c4133cdad15e3ecdd38741cfda7eac250b6d7c5b78ae9dad75641d84397f53313d48ae7f58109026d6f06f3de5087a8135ca5c1aee6e2c477c3d2987667078f175016e2436a5c9b17c1e1df9", 0x81}, {&(0x7f0000001440)="a40b862e281d079626a7588dd6bf4890e0ac88a5c2d088659651a95a1b482fcbbe8aa0f64a395bbf9c63e232020d1498ef146da72d0a5465e15253d4233fae570043a6de1e2d970b582421936602497610ec7180b72f94b51d247a6af5212f30e9f138fb0d30a5131c21be1b8127e729f9def538e32847236324bd6ceaaa51575da00abf922c942ab38d2ab3c1b399bb1cb6c9484528c2e7a442e101f1e14ee98ab70982df4c5921bcf4907079725fdd9a5069fd5d0e5e54bf2c587e539bc1fa4ae0e46057a55c96c90ac4eeb1fff9d6db0e1ff71e084087989e", 0xda}, {&(0x7f0000001540)="1740e8069c30b90b54dd31e815529fe05967ad27ef481f9ae28689252223f3fceea73aaf950330e5ab2c7e54d28e8fed6af8c4de17f4e2f69ea4e88567d43992ecdc293ba05ad8ba97028c0e098b8cef203a35c3e5dcc3aca5f4da157a1d5e59dc61429a135e52fe93009f5b7901338e34df3bc3326b3b40694284b88085ddf5dd49587ff46c73f5233f3397f0ddd89ea06d9d243b5303d7ac3268cb7a47b1c2df28c604a673c5841663db7e0f855f606ae23867271c1cd6e009fe86beaee89aa6999c9abd54c9a849f7e1eb012d4e824b86aabc4b3b28725f8b7a18c7", 0xdd}, {&(0x7f0000001640)="2e9f88fe1240e297bccb3dd6c581173e3ecd156ff12d38db9bd3f6fe588b13dd368f02a650018303f583006328f56d57285f2be01956b21e4439b1392a1618ff4f03d51eb7fe26f970d654f09cd137543e8d9affc3d1dd0144e9f951db135e6a6c161ed04c94505aa43b525eea855972123f0e67834ed931", 0x78}, {&(0x7f00000016c0)="63ff79c872f89bbc6a8e41f7b21bd23c5653a4a4c4ca5553b89b818389a45cb21b7997fb6d0e0e8346", 0x29}, {&(0x7f0000001700)="594800682b110d5c9d3e6e2a05079a2f437e89d685414af921cd6b2c28c4319e3c326bceccadad49bed77817db724ea0d0d87c442ed1e3a89e0ec1e37c0d063a4a6eec6222a85115ebe31caa880c3d0cf93cfe1506656c236fb27b709cf54749581773a89bd6e2b08760589866f34a240bdedf2e6294326cc290962ab579b1bf656fc58683290c4dc676f2abb9709947abc6dd27", 0x94}, {&(0x7f00000017c0)="e74fa511e9e2e99c35ff7865f6a5ca9b908b5f2c9e2687b45b3457c59681491a25d31538d87ae3232983", 0x2a}], 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x4}, {&(0x7f0000002e80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f00)="abeff81ef58a803e23e287a58faf265d3fd9b9ce3a6eba5e3de7f392d6a4c8fd52d19687a06e6e4c453111a6f360128c690e3a4190a2a8c9297093ac32d54fce351e120e958af27dbdd42a13bf2ae72bb0676a4c18ff959b5b03605963a02aa8caa81cfec45754d90b902aa7fced66e9432e7347a8dc9b90fbe6b5548acfdedb5f014b5c9e66bf363b55ce9ea825b0c47aa9d9a74db08d949430b29adf200604", 0xa0}, {&(0x7f0000002fc0)="cdac18af748c980873f07c84a3392f8b86fc6d508f705559bdb28888d02d19381220f0706e9759d94033b5186ebd53fc3af9156d63d4ec8ed1d07b73d1aeadbc4ef190839351562b7281eb0191cf777ca38fa5f41eb7f1042285605f41a43924c3b2b90ff5d750dd5fd92f097864dd8d345161584decd02c467c07c702cf8d7a89a7b7b3e82f219092a19888450b590ce0f58dd190f49647fc", 0x99}], 0x2, &(0x7f0000003380)=[@cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0x70, 0x40040}, {&(0x7f0000003400)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003480)="201d01af2536b2fb1ad977c3216b2fd6729d0dccdd1b8d213dd5805b8e7a15eb041441083e5ada90d854d99cccfbceaea1bf2ac51e02914c9cee0a2aa0848eec0abe52ef06a58af7bcdc5f1b7eecbbd1665de2a137f8d75366961af23c95dbae5a1f8f721834", 0x66}, {&(0x7f0000003500)="ec1d9d2d54a0b16ce832b4397add3a31", 0x10}], 0x2, &(0x7f0000004780)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r1, r0]}], 0x68, 0x8000}, {&(0x7f0000004800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000004880)="533d1db2e006c48abfbdb83d268cc142994f882e35b3c713cddf533c04f3d45b21cb9df26cfa127c870032a2fd8fb56d4144d947162847c103b489cda146cdcb0d5df713cc5782ca1cf24f9a1b77bf44d425be3744d996afdc7a", 0x5a}, {&(0x7f0000004900)="e0e5beacd44b1c6e7a26b4e7d3c1b68ec5c9a8cfd968c9a0f8e3cc3edeb3e0c843a61559127ded14a9f72f566106e9a53d9d639a910750e3b5dc8e057be4fd0c70cd7a86ea28b4ce", 0x48}, {&(0x7f0000004980)="be4ef333269d22c21b289d448fa161717d99cd858c71b6c3de4ff80277be99f896c16dcbba501148e15bcc14aa49c89c9578647dc3e26d32af20362e6c474230d40755d6babddd5ebc46321f70ca2da5153b8ede318161f1b4f1bbe23d92855832535663ef22a61c49ec5d778e5624d110c39c8e63f490bbdf52104d2a6cfd9c172a445413ea4dd230e5a2ea217108128ece0f1051531566853ac6c132f9457347cf681424ffaca5ff7c0e8b90af3aa4f35d322608d34030f1a25926a2b83fb7ccdd29521ffadb009724976c889d509952f5a09fd11be7077e5035f643b5e4e8e080e6f13ba3d47e6933ae4a", 0xec}, {&(0x7f0000004a80)="99ef812724ec378a3a52a4bba7d572a2e64c576beba297688957e506a6a0893b574aa1ef2b2cfdf18859361bd9d96b4fbb900d0be5b921dfc6affced2557177006e1c976a746978b420e8e055d2d8594348bbb35f7eb6539", 0x58}, {&(0x7f0000004b00)="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", 0xfe}, {&(0x7f0000004c00)="e813091399b070b84268b8dfc0390ab2e07bddf46386cb4f8364d4c2ec669775d8fc58ab0eac57f033e0b816a6789cae872c34393137a3d531b188f7d55318d898d4d448f25eecdcb5ce6567a48b3c79ae3766650dd9b96fff3a5d5c4b17ea50cbaccf42a350351ba2a3af4bc12dfd293a824b75d30e490b96cf713ea3ec3f94bc45b6264abeff3afe4d4386f52d8fc7fbfbd805e337db742d1993c786e36e1f387570ada9a6a994e8f044ed0e621219ca4564febeb7047e7288e4ae6d5eebecd62bdc10a1d2be642415dcdc6d02b8377eb8c023ed5b8acc60aea788ed3a", 0xde}, {&(0x7f0000004d00)="1271619117cbab2999d8fd241198b74271b6a5180e81352976fddf9f6c8778d2e627e835478f0c9e546f1d4eca90bdb35ab5f060f01b5b5bdad14236a63fb0536ab6343f0576f67b81555d1b2282714f434c143c1cb73daa54bf7fc6a266c2059e9c3b1afaae4a1bc93ccb06635876061e6808d3ad93e4c81a08b449a29e4d64b5dc9e3d29368021ff0b", 0x8a}, {&(0x7f0000004dc0)="604448053de2cd0ef7a41ef56bd8ef6c3d6ac47b1dc0abdd85a98345c4698b68dacaa069a29cada9afea323442ae8c3f6f7feb2f33aa697c7c58f52ba8647fb73e4fc1d5048554e617cae341fd802f555f02dfe7e71ff1675eb14995e2e4908a8dda7d2a65d7734d6d1717ee2cb75ce8d34611e784cdba0d75b9125504", 0x7d}, {&(0x7f0000004e40)="51f977252d49fb15ae68dab12200497ba8e4d6cde89e41815c096d32e5dfbb01b203", 0x22}], 0x9, 0x0, 0x0, 0x4000000}, {&(0x7f0000004f40)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000006140)=[{&(0x7f0000004fc0)="3351d931cf27e32fe7a0d9a9b4d21ba9d8604b5df4e7712716c0dd213e430c7bdaaf80098b660a8af857f48c699154e563a302adca2ffec5629f1c4240890f3102b94465d64d81fac8ed53547ec941aa40240878bae4f6c2f703eef33941a1b14c8e24ff2a85d60c12518c1ac597f9b54ff84eb2b75b0b3c99bda441", 0x7c}, {&(0x7f0000005040)="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", 0x1000}, {&(0x7f0000006040)="22b54127e98be45bd3ee87343dcf775e88456ae4293770200701a5a2ad50bfedb484680dc92ef063b054d658b1c87ca487e14d4787edd81bf48d5f795de243c8ce707482ee596b415fcbaaf3f7b772537c0824b2ee900cf45ccbac816cd27c497109b95b947edb7a891616b65b72ea4316f1d4281fa7a9c7f145ad5ab04d3f112f21929bfb84a22dc5857e1b44079945514d2ead1eaca7450fd98820a52b36275cc7a0806d6db78d2b26351f1336acc11b1908fb66843a45086fc9dd2e2f29a74491a1239eceed2c47ea7897342079", 0xcf}], 0x3, &(0x7f0000006300)=ANY=[@ANYBLOB="1800e4000000006343e14734f4e67a00", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x1}], 0x7, 0x6c18c8072fc9877d) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c50a2f15816d139193b27061011a05a812d85ea0f856b338baceea5f05f411509aa78b389745f5c25ac2dd4a82995a12287564330a79f6d3186f351872b384ef382830a"]) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"124a226a7dd22b0389974bf596d77041ad214e91955df34b9152bfc738e7034f721508657eaeca1135365bcacd47f13e9d21f1e6eecd5fd1d9780906076f0270796dfc2211ddd005d92aebbf9b04a8dcbad853031db1b093bde557c1eab9046db769feb0218a4608683cb2ea9635722bbda9117f37838d737d5c0f4770b94b5f1a33187f046862d56ae3b1991cab9e6ef17427a625737930ab731b3837014330ef92c70016bf68c04414bdb7bb8a5579097f4db2e8da4a48e32efb395fc4de37af976a52bf3c55edb570c1156479f72efacfdade1089ee5b8a15b07b627c8c91f02d4f9bb463248c075a3680f4e2c5dd6fb069cdb9a95f2471939bb73e5561a772615a8e9d52fb242431ce4dc273e23d48714f55b2625bd2b56a2c39c156864697a85738f7c9f3e74fd0e21649fe601e7ccfa5ff11a89f499bcf0d7ceec9c9fb8c303afa6bf311336db6ecbb6c9c37d7880e5ac467458dc99960c6005078a322ad9b5acdb3fe5254cbcdbd9e218f9c9041fab8d3af9f4a0d3219bc625218051c1b7e766c40d94f8abce6048a64282f28ce5e155ac7a5042b8be19d77e1e20769590f28c642dcf3665bbbc0df3fdab16257198e225ca96d1bd7f2cc8d0e5169027503bdeafcd1abf8ea9fdc6c0266415dc735dbafa3972e254e210ee7c2bcbade2dde01632cc3889d013cff275c64cb287aa523746dc1dff0ee542ec0ee547a9baff2aab7175e451c9ed34b9a1d824812d0182e00b84cd66ffc183e0d3eadd2e24b698b0878fdfc5ec47a643743079548971c37eabf2dce0caab43ff9e22b37d515f0ed24c72effa1c35b3c67035ece07b7254fa27ae40ef704c42cb77d857d4921aa78d89693491660e5565dd8c1ba5143fb2df02ba64ae3a68b95f68624df0ea64a6036817ab180438ee38aaa4357a33d0d64653a9fab2903c5ed0cf96698a895cb81263798abdd5577a1387b8abfc241ac124578f26fb04bb37cab99434869cb55caafada2b2d65789dd63c3807c26ab8683f56e8a442955fae64c264ec65b91e0b5df18056d980800ba2b92612aab53558526d6a5f434101c743728a095babb42a63934d6812304ab0be94b43cd841bfda5939162a7284a990dab5efcb9f7a93a6bed3d0e398bdfbe2da38736dbccb225489b916758867374f5c7b3d0998676e7b8eb4ee4bad567e03433dba809a7857ebea7ce265271345e137bbc6405416911b4ecf576093228d212ee2a60c3c5bb70ff2a3af265fe818d1e17b45e0851f99b3424b91e8e9ab388a1def5e6435cdd4c4971df21c44d4f510ad154733fe3d37807cf594bd218dff0815aa8303e20b7f08fe86cc461443e1b78f1b11eac6c5d9c7ac644ca473b7e09519e3b35d389648329794ff7b0e5ef14ec2f7bc99c98a422f3c3cebe14001059844b74557694baa63a7c851d31f979a5779c0d9acb83"}) readv(r0, &(0x7f0000001900)=[{&(0x7f0000001880)=""/92, 0x5c}], 0x1) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x7}}, 0x18) lstat(&(0x7f0000003580)='./file0\x00', 0x0) 20:17:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240000, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0xffff, 0x30}, &(0x7f0000000340)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x4000) write$smack_current(r2, &(0x7f0000000200)='lotrusted\x00', 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x200, 0x4) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000095914ddf96b0ee939a59839b689c88b42ab8dfacb2ce6d4a62cd24c9d5de1a0066eb9c643c8a595eb8c0e016dd806a7eb66fa41f9907a188d7b7acc77d01336c07a5063ec6d6f38f3a931e155516a32588342782f85de26b0d5ef5"]) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000380)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x840000002007ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) getuid() r6 = geteuid() setfsuid(r6) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, 0x0) socket$inet(0x2, 0xa, 0x2) 20:17:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '@vboxnet0bdev\x00'}, &(0x7f0000000080)='lo\x00', 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'irlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) 20:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1c50c2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x743b) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000004ff0)={0x0, 0x0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x7fff, 0x0, 0x80007}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) 20:17:36 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x7, [0x2, 0x56, 0x0, 0xfff, 0xff, 0x7, 0x9ba4]}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x2c0, 0xf0ff7f) 20:17:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:17:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 206.124373][ T8681] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 206.134360][ T8679] sock: process `syz-executor.3' is using obsolete setsockopt SO_BSDCOMPAT 20:17:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {}, {}, {}, 0x3}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd385, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x9, 0x4) [ 206.306778][ T26] audit: type=1804 audit(1553199456.255:37): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/24/file0/bus" dev="ramfs" ino=30740 res=1 20:17:36 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:17:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 206.518987][ T26] audit: type=1804 audit(1553199456.465:38): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/25/file0/bus" dev="ramfs" ino=30783 res=1 20:17:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:17:36 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240000, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0xffff, 0x30}, &(0x7f0000000340)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x4000) write$smack_current(r2, &(0x7f0000000200)='lotrusted\x00', 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x200, 0x4) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000095914ddf96b0ee939a59839b689c88b42ab8dfacb2ce6d4a62cd24c9d5de1a0066eb9c643c8a595eb8c0e016dd806a7eb66fa41f9907a188d7b7acc77d01336c07a5063ec6d6f38f3a931e155516a32588342782f85de26b0d5ef5"]) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000380)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x840000002007ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) getuid() r6 = geteuid() setfsuid(r6) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, 0x0) socket$inet(0x2, 0xa, 0x2) 20:17:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xffffffffffffffff, 0xfffffffff7fffffd) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup(r0) fstatfs(r0, &(0x7f00000000c0)=""/93) ioctl$KVM_SMI(r2, 0xaeb7) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r1, 0x0, 0xfffffffffffff000, 0x100000000}, {r1, 0x0, 0x1000000001000, 0x8000}, {r1, 0x0, 0x0, 0x12000}, {r2, 0x0, 0x10000, 0xfffffffff0000000}, {r2, 0x0, 0xfffff000, 0xfffff000}, {r3, 0x0, 0xfffffffff0000000, 0x101005000}]}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7, 0x101}, {0x8, 0x573}]}) 20:17:36 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 207.042116][ T26] audit: type=1804 audit(1553199456.985:39): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/26/file0/bus" dev="ramfs" ino=30842 res=1 20:17:39 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:39 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x7, [0x2, 0x56, 0x0, 0xfff, 0xff, 0x7, 0x9ba4]}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x2c0, 0xf0ff7f) 20:17:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240000, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0xffff, 0x30}, &(0x7f0000000340)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x4000) write$smack_current(r2, &(0x7f0000000200)='lotrusted\x00', 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x200, 0x4) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000095914ddf96b0ee939a59839b689c88b42ab8dfacb2ce6d4a62cd24c9d5de1a0066eb9c643c8a595eb8c0e016dd806a7eb66fa41f9907a188d7b7acc77d01336c07a5063ec6d6f38f3a931e155516a32588342782f85de26b0d5ef5"]) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000380)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x840000002007ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) getuid() r6 = geteuid() setfsuid(r6) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, 0x0) socket$inet(0x2, 0xa, 0x2) 20:17:39 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240000, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0xffff, 0x30}, &(0x7f0000000340)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x4000) write$smack_current(r2, &(0x7f0000000200)='lotrusted\x00', 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x200, 0x4) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000095914ddf96b0ee939a59839b689c88b42ab8dfacb2ce6d4a62cd24c9d5de1a0066eb9c643c8a595eb8c0e016dd806a7eb66fa41f9907a188d7b7acc77d01336c07a5063ec6d6f38f3a931e155516a32588342782f85de26b0d5ef5"]) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000380)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) pipe2$9p(0x0, 0x840000002007ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) getuid() r6 = geteuid() setfsuid(r6) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, 0x0) socket$inet(0x2, 0xa, 0x2) 20:17:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 209.565702][ C0] net_ratelimit: 1 callbacks suppressed [ 209.565731][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 209.578096][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 209.876135][ T26] audit: type=1804 audit(1553199459.825:40): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/27/file0/bus" dev="ramfs" ino=30449 res=1 20:17:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:40 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 210.502148][ T26] audit: type=1804 audit(1553199460.445:41): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/28/file0/bus" dev="ramfs" ino=30519 res=1 20:17:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT(r1, 0x3, 0x10, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x180, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x8000, 0x6001}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000080)={0x2, 0x95cb, 0x3, 0x10000, 0x1, 0x10001}) 20:17:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x0, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:42 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x7, [0x2, 0x56, 0x0, 0xfff, 0xff, 0x7, 0x9ba4]}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x2c0, 0xf0ff7f) 20:17:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)=@known='com.apple.FinderInfo\x00', &(0x7f0000001f80)='wlan0system$%securityuservmnet0@keyringposix_acl_accessvboxnet1selinuxsecurity(posix_acl_accesslo(posix_acl_access!#em0$#vboxnet1systemmime_type!em1wlan1^\x00', 0xffa7, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x48, 0x0, &(0x7f0000000380)="d6f12a4d445d62afe2701ac3ac23a2a41d99eb979fc4a353aaba4db448cb8e95a23990bbd5fbdd1bb504d953ad397b734dfe536c44b349369f96bdc43065fc1f4ca3f7c0a0890d93"}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) getgid() syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) r5 = syz_open_procfs(r4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001d00)={@empty, 0x6, r0}) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000002c0)) r6 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3, 0x200000) openat$tun(0xffffffffffffff9c, &(0x7f0000002040)='/dev/net/tun\x00', 0x101000, 0x0) recvmmsg(r6, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="9f64d09cb71ec21e483b914bb077027c21e75f306d00d04fc92b385a25c254cde13d460050ccaa72", 0x28, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000600)={{0x0, 0x80000000}, {0x3}, 0x285f, 0x4}) 20:17:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:42 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 212.364956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 212.370835][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:42 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x82800, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180)=0x2b, 0x4) r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) connect$netlink(r3, &(0x7f00000000c0)=@unspec, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000100)) r4 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) connect$l2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x2, 0x1, {0xa, 0x4e24, 0xfffffffffffffffd, @empty}}}, 0x3a) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r1) 20:17:42 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 212.461862][ T8800] binder: 8798:8800 ERROR: BC_REGISTER_LOOPER called without request 20:17:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x0, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 212.528712][ T8800] binder: 8800 RLIMIT_NICE not set 20:17:42 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a001fff00000000000000001e000000000400f0ff000000"], 0x1c}}, 0x0) [ 212.591553][ T8820] binder: 8798:8820 BC_ACQUIRE_DONE u0000000000000000 node 1 cookie mismatch 0000000000000002 != 0000000000000000 20:17:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:42 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 212.711914][ T8800] binder: 8800 RLIMIT_NICE not set [ 212.780297][ T8820] binder: 8798:8820 got reply transaction with no transaction stack [ 212.827170][ T8820] binder: 8798:8820 transaction failed 29201/-71, size 0-561674611 line 2899 [ 212.891502][ T8800] binder: BINDER_SET_CONTEXT_MGR already set [ 212.910140][ T8820] binder_alloc: 8798: binder_alloc_buf, no vma [ 212.946446][ T8800] binder: 8798:8800 ioctl 40046207 0 returned -16 [ 212.959681][ T8820] binder: 8798:8820 transaction failed 29189/-3, size 0-0 line 3147 [ 212.962089][ T8846] binder: 8798:8846 BC_ACQUIRE_DONE u0000000000000000 no match [ 212.983439][ T8822] binder: 8798:8822 ERROR: BC_REGISTER_LOOPER called without request [ 212.993047][ T8822] binder: 8822 RLIMIT_NICE not set [ 212.998784][ T8846] binder: 8798:8846 got reply transaction with no transaction stack [ 213.014341][ T7766] binder: release 8798:8800 transaction 2 out, still active [ 213.023351][ T8846] binder: 8798:8846 transaction failed 29201/-71, size 0-0 line 2899 [ 213.032399][ T7766] binder: undelivered TRANSACTION_COMPLETE [ 213.039013][ T7766] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.053785][ T7766] binder: release 8798:8800 transaction 2 in, still active [ 213.072153][ T7766] binder: send failed reply for transaction 2, target dead [ 213.090979][ T7766] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.098089][ T7766] binder: undelivered TRANSACTION_ERROR: 29201 20:17:45 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x7, [0x2, 0x56, 0x0, 0xfff, 0xff, 0x7, 0x9ba4]}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f00000000c0)) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x2c0, 0xf0ff7f) 20:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a001fff00000000000000001e000000000400f0ff000000"], 0x1c}}, 0x0) 20:17:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x0, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)=@known='com.apple.FinderInfo\x00', &(0x7f0000001f80)='wlan0system$%securityuservmnet0@keyringposix_acl_accessvboxnet1selinuxsecurity(posix_acl_accesslo(posix_acl_access!#em0$#vboxnet1systemmime_type!em1wlan1^\x00', 0xffa7, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x48, 0x0, &(0x7f0000000380)="d6f12a4d445d62afe2701ac3ac23a2a41d99eb979fc4a353aaba4db448cb8e95a23990bbd5fbdd1bb504d953ad397b734dfe536c44b349369f96bdc43065fc1f4ca3f7c0a0890d93"}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) getgid() syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) r5 = syz_open_procfs(r4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001d00)={@empty, 0x6, r0}) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000002c0)) r6 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3, 0x200000) openat$tun(0xffffffffffffff9c, &(0x7f0000002040)='/dev/net/tun\x00', 0x101000, 0x0) recvmmsg(r6, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="9f64d09cb71ec21e483b914bb077027c21e75f306d00d04fc92b385a25c254cde13d460050ccaa72", 0x28, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000600)={{0x0, 0x80000000}, {0x3}, 0x285f, 0x4}) 20:17:45 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 215.521725][ T8851] binder: 8849:8851 ERROR: BC_REGISTER_LOOPER called without request 20:17:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)=@known='com.apple.FinderInfo\x00', &(0x7f0000001f80)='wlan0system$%securityuservmnet0@keyringposix_acl_accessvboxnet1selinuxsecurity(posix_acl_accesslo(posix_acl_access!#em0$#vboxnet1systemmime_type!em1wlan1^\x00', 0xffa7, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x48, 0x0, &(0x7f0000000380)="d6f12a4d445d62afe2701ac3ac23a2a41d99eb979fc4a353aaba4db448cb8e95a23990bbd5fbdd1bb504d953ad397b734dfe536c44b349369f96bdc43065fc1f4ca3f7c0a0890d93"}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) getgid() syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) r5 = syz_open_procfs(r4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001d00)={@empty, 0x6, r0}) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000002c0)) r6 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3, 0x200000) openat$tun(0xffffffffffffff9c, &(0x7f0000002040)='/dev/net/tun\x00', 0x101000, 0x0) recvmmsg(r6, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="9f64d09cb71ec21e483b914bb077027c21e75f306d00d04fc92b385a25c254cde13d460050ccaa72", 0x28, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000600)={{0x0, 0x80000000}, {0x3}, 0x285f, 0x4}) [ 215.566902][ T8866] binder: 8849:8866 BC_ACQUIRE_DONE u0000000000000000 node 6 cookie mismatch 0000000000000002 != 0000000000000000 [ 215.593100][ T8866] binder: 8849:8866 got reply transaction with no transaction stack [ 215.611737][ T8851] binder: 8851 RLIMIT_NICE not set 20:17:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 215.658235][ T8866] binder: 8849:8866 transaction failed 29201/-71, size 0-0 line 2899 [ 215.704155][ T8851] binder: 8851 RLIMIT_NICE not set [ 215.783071][ T8873] binder: BINDER_SET_CONTEXT_MGR already set [ 215.804947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 215.810769][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:17:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 215.839104][ T12] binder: release 8849:8851 transaction 7 out, still active [ 215.843250][ T8878] binder: 8871:8878 ERROR: BC_REGISTER_LOOPER called without request [ 215.856674][ T8878] binder: 8878 RLIMIT_NICE not set [ 215.859967][ T8873] binder: 8871:8873 ioctl 40046207 0 returned -16 [ 215.874097][ T12] binder: undelivered TRANSACTION_COMPLETE 20:17:45 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = dup2(r0, r0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x48, &(0x7f0000000000)={0x401, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="110817ae4f8eeeea18d78528c351556ab14e207da3eb77de98bf85a6f9917c1d251da97464c0a8c663f759693c232463af73670170beef182ca6c0d8ffe9a090b008250f4a5a09c6d3cdd832475fcf762aa90e0526879885d51a8bc8ec710d23130ae387c3069be65dac3973b6167b5087b116fb31a2f8cf70ffff650f744cbaab15e4080e3aabd35f0ce11a3854c78195dd9483cddd63f3b0db73e975a2be32048941e989ed1cc9860a51fb250d337155a86606935b29ba39036122465f6789697d8b0f9f332f9340d7ac11a0c2cbe32c0eda8b00925d0f7ab236e7df799e3629", 0xe1) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f00000001c0)=""/196, &(0x7f00000002c0)=0xc4) 20:17:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 215.912190][ T12] binder: release 8849:8851 transaction 7 in, still active [ 215.930211][ T12] binder: send failed reply for transaction 7, target dead [ 215.938425][ T8880] binder: 8871:8880 BC_ACQUIRE_DONE u0000000000000000 no match [ 216.003626][ T12] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.019236][ T12] binder: send failed reply for transaction 9 to 8871:8878 [ 216.034147][ T8880] binder: 8871:8880 got reply transaction with no transaction stack [ 216.080143][ T8880] binder: 8871:8880 transaction failed 29201/-71, size 0-0 line 2899 [ 216.149289][ T7766] binder: undelivered TRANSACTION_COMPLETE [ 216.155538][ T7766] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.206194][ T7766] binder: undelivered TRANSACTION_ERROR: 29201 20:17:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x2) recvfrom$unix(r1, &(0x7f0000000080)=""/21, 0x15, 0x40, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x3, [@empty, @remote, @loopback]}, 0x1c) 20:17:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:48 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x60) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x301103) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 20:17:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:48 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x8000000000032, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)) r0 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000040)={0x0, r0}, &(0x7f0000000080)={0x5, 0xffffffff, 0x7ff, 0x4, 0x304, 0xbcad}) 20:17:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x2, 0xfffff034}, {0x3, 0x0, 0x10000}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000000000004e21}, 0x5960de2ce23c408a) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 20:17:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x3) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x2, 0x4) ioctl$BLKTRACESETUP(r0, 0x2202, 0x0) 20:17:48 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x1) 20:17:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x200) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000380)={0xa, 0x1, {0x57, 0x100000001, 0xa4d, {0x81, 0x3}, {0x6, 0xfff}, @ramp={0xcb, 0x10001, {0x3f, 0x4, 0x6, 0x3}}}, {0x0, 0x100, 0x44, {0x2, 0x9}, {0x5, 0x5}, @period={0x5d, 0x0, 0x651, 0xfff, 0x100, {0x8, 0x8, 0x2, 0x3}, 0x1, &(0x7f0000000340)=[0x7]}}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r0, r2, 0x80000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/231, 0xe7}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/232, 0xe8}], 0x3) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xc9, 0x101800) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x8d, 0x6, 0x80, 0x9584, 0x9, 0x1, 0x8, 0x1, 0x2, 0x8, 0x3, 0x2, 0x1, 0x3, 0x3, 0x1], 0x1f000, 0x100}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000004c0)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000500)={r6, 0x5}, 0x8) write$binfmt_elf32(r4, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000f40)=ANY=[@ANYRES64=r1, @ANYPTR64=&(0x7f0000000ec0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES32=r6, @ANYRESOCT=r0, @ANYRES32=r0, @ANYPTR, @ANYPTR64=&(0x7f0000000e40)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], @ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYRES64=0x0, @ANYBLOB="6cca71c2d00cf17ef385887d35e196978843a55c", @ANYRES32=r4], @ANYRES16=0x0], @ANYRES32], 0x3) socket$alg(0x26, 0x5, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f00000000c0)={0x5, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000140)={0xe9, r8}) 20:17:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080002, 0xa8be) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x402400, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/238) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x200000, 0x1) r3 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001540)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0, 0x0}, &(0x7f00000015c0)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000001600)={0x0, 0x0}) r7 = geteuid() r8 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001640)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001680)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f0000001780)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0, 0x0}, &(0x7f0000001800)=0xc) r12 = gettid() stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() sendmsg$unix(r2, &(0x7f00000019c0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bc2f5693dffcaae66799339df2916b9635992791fcce76a8d051dbfeb0ef20e5e77995dc7840c2cab6aa011b768379fdfa45ea8ce64f75ac91a3f37c50fd8d59dae2f264d9426c74b0012390fb45a9873780f7c29b0dc7271e5dcda0e2a1e51cc2568e45061b88a551a2dca446e5fae2c1d454b15837a3bd583fec71a43ae20e54f9672b2c6fee021716835f01130778515994027d11e9d27053397ea64aa2d7f7841b6195b1c502d26c46fe0cabd0409ac9da928aeef3adaec1d8594227537e387220701ff53dba8572e6c1f7734c9713627759ac929320b4dee42e8c7fdc50064834eafde91f631d96591a819c5958ca2c4bf3db1dc4", 0xf7}], 0x2, &(0x7f0000001900)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}], 0xa0, 0x40088c1}, 0x40000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)=0xfffffefc) 20:17:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x600) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x6) dup2(r0, r1) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000080)) 20:17:48 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) [ 219.067372][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.092661][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.106095][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.120963][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.157546][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:17:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000003c0)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000300)=""/139, 0x8b}, &(0x7f0000000040), 0x42}, 0xa0) r3 = dup2(r1, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x26, &(0x7f00000000c0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 20:17:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x6, &(0x7f0000000440)=[r3, r4, r5, r6, r7, r8]) 20:17:49 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) [ 219.167219][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.175069][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.183570][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.191414][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.199019][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 219.217513][ T12] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:17:49 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) r2 = getuid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() r15 = getegid() getgroups(0x9, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000bc0)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x3, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}, {0x2, 0x4, r8}, {0x2, 0x2, r9}, {0x2, 0x2, r10}], {0x4, 0x6}, [{0x8, 0x1, r11}, {0x8, 0x7, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r14}, {0x8, 0x4, r15}, {0x8, 0x4, r16}, {0x8, 0x7, r17}], {0x10, 0x6}, {0x20, 0x4}}, 0xac, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) write$cgroup_int(r19, &(0x7f0000000100), 0x1bd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r18, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x20, 0x51b, 0x1}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r19, 0x84, 0x76, &(0x7f00000000c0)={r21, 0x5}, 0x8) ioctl$EXT4_IOC_MIGRATE(r19, 0x6609) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r18, 0x0, r20, 0x0, 0x8100000, 0x0) [ 219.245551][ T12] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 20:17:49 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) 20:17:49 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x301000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000640)={&(0x7f0000ffd000/0x1000)=nil, 0xff, 0x5, 0x9, &(0x7f0000ffd000/0x1000)=nil, 0xffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="0983e026233b779e077b06e687e794d47186bf15e1dad0eb2c9adde77f505675c491efb8f3394ad90d6d841f5f31adb6750a3bc6e2d20d2b37309309b877e188943cce26e64a56176a755b0f415ada5623d5e48dc10c01413108f0a426ff42b5ea358fbc89f50253c575ac7da4efdec256a8f4a66ad4d7b84b25182870e7003b7993f316115167129f9b437a54855f8ed18f65ff2a1fe4692d12a108bde01970111e32577d2c1321f0dc16bb1a2b080a9d5f094b131bca013106781f587d3bcddfc911b37743bd233fb362ed16fdc41c337f169fe11b735e6805cff8c4552b336bdaf1733eea3ec9316ece4420ee9e17c8f5272e57fc47", 0xf7, 0xffffffffffffffff) r3 = getpgid(0x0) capset(&(0x7f0000000480)={0x200f1526, r3}, &(0x7f00000004c0)={0x0, 0x471d, 0x20, 0x1, 0x1, 0x20500}) write$FUSE_DIRENT(r1, &(0x7f0000000500)={0xf0, 0x0, 0x5, [{0x6, 0x7, 0x4, 0x9, '\\em1'}, {0x2, 0x7ff, 0xf, 0x1, 'key_or_keyring:'}, {0x6, 0x40, 0x7, 0xffffffffffff0000, ':chain\x00'}, {0x2, 0x7, 0x0, 0x80000001}, {0x5, 0x4, 0x0, 0x8}, {0x5, 0xd537, 0xa, 0xffffffffffffff7a, '}mime_type'}, {0x1, 0x7, 0x3, 0x4, 'syz'}]}, 0xf0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="e138f30dcd42edc282ef03a0141af83c3c3b78191a3e9c14d34d4ee03d4e09b9d400d33122e8877921861f0d47eb425dbc90000acd24f14cc0611f0f0da7efa04d8a39f58be714adb283485bbacc5d1f99983783525607325e594193b1c007a5be4e8c86a37e2fdbeee086f3721dfc6e2d68feb6abbfc379fc0a9dd33287d54f98ac47046d8d270d1de8aae324ccf441943bfe1a869a586ed2d4047eddc403165fa335d15629d8ab4a57216c2388d46a02afb5dbf30bf3e1c7560821f56f44d6511d0b638482ca5db16c298bca278726df1d72006f2052ef1cc34d9f", 0xdc, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='trusted\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r4, ':chain\x00'}) dup2(r1, r1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000600)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000680)='/dev/md0\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f00000000c0)={0x7, 0x600000000000000, [0x8b, 0x7f, 0x0, 0x2], [0xc2]}) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000000)=0x7) 20:17:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:49 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) r2 = getuid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() r15 = getegid() getgroups(0x9, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000bc0)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x3, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}, {0x2, 0x4, r8}, {0x2, 0x2, r9}, {0x2, 0x2, r10}], {0x4, 0x6}, [{0x8, 0x1, r11}, {0x8, 0x7, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r14}, {0x8, 0x4, r15}, {0x8, 0x4, r16}, {0x8, 0x7, r17}], {0x10, 0x6}, {0x20, 0x4}}, 0xac, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) write$cgroup_int(r19, &(0x7f0000000100), 0x1bd) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r18, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x20, 0x51b, 0x1}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r19, 0x84, 0x76, &(0x7f00000000c0)={r21, 0x5}, 0x8) ioctl$EXT4_IOC_MIGRATE(r19, 0x6609) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r18, 0x0, r20, 0x0, 0x8100000, 0x0) 20:17:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x6, &(0x7f0000000440)=[r3, r4, r5, r6, r7, r8]) 20:17:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 219.772652][ T26] audit: type=1804 audit(1553199469.715:42): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/35/file0/bus" dev="ramfs" ino=31454 res=1 20:17:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000f9c000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/49) 20:17:49 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0xff, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ff, 0x800) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200000) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000100)={r1, 0xff}) r2 = userfaultfd(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x36b, 0x0, {0x0, 0x3, 0x20, 0x3}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000011000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000180)={r1, 0x6}) 20:17:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x6, &(0x7f0000000440)=[r3, r4, r5, r6, r7, r8]) 20:17:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x400200) keyctl$chown(0x16, r0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 20:17:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getgroups(0x6, &(0x7f0000000440)=[r3, r4, r5, r6, r7, r8]) 20:17:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:50 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:50 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10400, 0x0) syz_open_dev$sndpcmp(0x0, 0xffffffffffffffff, 0x40) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 20:17:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000f9c000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/49) 20:17:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fstat(r2, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) 20:17:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000f9c000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/49) 20:17:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fstat(r2, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fstat(r2, &(0x7f0000000300)) 20:17:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, 0x0, 0x0) 20:17:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fstat(r2, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 20:17:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, 0x0, 0x0) 20:17:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000f9c000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bcc000/0x3000)=nil, 0x3000, 0x0) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/49) 20:17:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000006c0)=@secondary='builtin_and_secondary_trusted\x00') add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xd01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:17:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, 0x0, 0x0) 20:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x200000) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x187, [0x40000020]}) 20:17:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) fstat(r2, &(0x7f0000000200)) 20:17:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 20:17:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x1, 0xb, 0x4, 0x20070000, {}, {0x4, 0x0, 0x8000, 0x5, 0x7, 0x8, "6bd4396e"}, 0x3, 0x3, @planes=&(0x7f0000000000)={0x2, 0x1, @mem_offset=0x100, 0x9}, 0x4}) write(r1, &(0x7f0000000100)="f4", 0x1) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0x4) recvmmsg(r2, &(0x7f0000002bc0), 0x196, 0x0, 0x0) 20:17:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4f40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x100001000}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\x06\x00\x00\x00\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x40100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) r7 = getegid() r8 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) r10 = getegid() r11 = fcntl$getown(r0, 0x9) stat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002280)=[0xee00]) r14 = fcntl$getown(r3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000023c0)=0xe8) stat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000024c0)=0x0) r18 = getuid() getresgid(&(0x7f0000002500)=0x0, &(0x7f0000002540), &(0x7f0000002580)) sendmmsg$unix(r3, &(0x7f00000026c0)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)="af31f8cfc02f5551869b7158d28f", 0xe}], 0x1, &(0x7f0000002780)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="200018000400de7f5bac0094050599930bdcae2464e3aeef61d6f18fc4cfe8a94ba589c13ff80f8759134cd9a8f17032a2a4e4af0fe788ffd6436ff2453fe8d20cd7957905eb62e59a00000000000000000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3], 0x90, 0x800}, {&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001800)="9696aa61eb412322a30e79620adf02476db98d50bd43b72587da54ca6d9d0304fdc66f14c20a4e604e6d2935f185b2a3eed1bfd45779137bb2c49a21af71514c5a6f261f571d", 0x46}, {&(0x7f0000001880)="dfbd3d1bf15fcbe60179349c6ceb6d677ca04e7ed17ec7e816d65cb9c1755d326b2b997edcf4dc2c59c55d166d243e55ea6963f493949242f617fb95c127a7e742716a86a8b70d3811c9d9074320d578219a000b060a283f8f769fbb4448a694461ae472126d6bf9b5971f661fd925c729879779e33dfdc5dc6d26cd8f0d2b8b5e01a98b7d0e87b7eee90d59a8d38a20bb3d7cc8836c2084973b8ba241b8288efd67a1218fe3ae", 0xa7}, {&(0x7f0000001940)="e432c40c6b14131203b09f1b70d1debbe4b23e96001dd2b602f77eb17ea230a00db63e594218297ffbc8a68820e51f0d59a2dc65d168f9e18d5d384fef5375fc3ab1f0babd20a2ee40a58d78644b92237ea93966f5e2ea8c092a1201214e8c86f66de9a4f03c80e090bd", 0x6a}, {&(0x7f00000019c0)="368a7ca18b7f16f07bfa6bb892a517120b70be99d31a6706cc3e889f46a713e20ebdaac2117bcd328ce40e35c03a099c8cf30b3486c5fd8a04d0a3d25c041ba1b472f708f1787ed7b768ab93c699866ef9287e38b0adb876639333af76a4d08641bea6a5cf9718a8e6f77ed81e155596cf54a67d4905e03bad1fc48dc975d6a4dd8b80d54705275aab", 0x89}, {&(0x7f0000001a80)="f31f646f395464da0c407425cfb7940e9fb89808d01b238913cedd1a6f5d24256f363892b89626baa57bd56cad4979655dcc1bdb1bbeb9a9f88c30b345ab9d635f11072c326540d88fa17e4df23886bf37782a1be89aa1a8c05d9fff2c9f58bf731d6c4bcbbef816f4e5475b03df0cd326ce5998b8f9ee7137910c47ffb6e3ea6fc0adf542c3db39e543a49dcad0c5d85596aa15d97b8481a3217ab673f5747a24f94b02b4cd91013b24f67ff72605bea61186630bb2136352ba7fa56ac20ebec4bcd001a32da79474dce5e65458b6296545616f84d08437fa250bebe18e2cb18c6a80fcdf061bbc13f3", 0xea}, {&(0x7f0000001b80)="4f5a726cb2a7978ce74f3b3e71adc77d1e894b3580820eb5a764871868db9f7b465862f0fd47a3feb0f3201e55e6096cea9c06200d2491bd673a89a9edf3a543f7f59d08ad34fd6f25bcf349b2a660cbaef305e26b53d3c904cc1352cb16506e822866e6cc328cc46df0e31a47c90d4a5ad9a84e1b262d5f537fd46ccdc8b4123ea3095f8f8d3d2986a2aa558ae6652db9e203", 0x93}, {&(0x7f0000001c40)="fbc85807a4b091d325717eb1ab90f7e09215501c7e164b140d96ac5d2210a585fe8bd6b636715ddf9a59613619089c5d9695d74b3b3ba21ad969842f30d0a833d5f092a9814df6aabc254b52cb", 0x4d}, {&(0x7f0000001cc0)="078c20cf33138bcc61e0bf1048cf7d586de043695751622bd7296a2d72599f4d8eb98ac92c37e1256252a1841bad754f348b981cd6013bfcb19820f1e65050223680acaf55", 0x45}], 0x8, &(0x7f0000001dc0), 0x0, 0x20000000}, {&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001e80)="aaf194654f640c0921c195da9cc2cf13b25d44", 0x13}, {&(0x7f0000001ec0)="a206f929ee53808f3cbc7ab80f315e4ad913197925", 0x15}, {&(0x7f0000001f00)="6c1b854a3b6ce02948fd248e6d99c4df687960e724f64883dc93a34ae838113664123f982246d4504047262af793afa71f3fcf6cb368ba8202ff31e04419d10ee211bd982412f75528ac1f959807451d6b949b3bc06e992d7e7694115d0c3ab221aa3774e828548dee3f2183fe1db9755756ff2940ebcfde03e012593ea9720835c28cd14187ca6759b576b8289631a69766de7a9231e865c40c79cc199fcd9ee5516ba4a2015c4b8c05512e601c89585f2b2c34d95be69efc6e9080e16773a7dfb5a22052", 0xc5}, {&(0x7f0000002000)="402432e67d94ebbd503e655ce7f01150b4e3c9d8c2acd8c851267d2bee736c6b2120fcf72f2829f6", 0x28}, {&(0x7f0000002040)="5af4d0eba151e178a6f16c720ada713dfdc7c5d8c3d2f27cf419a00801285d18ccee3a1cd44967520b98d98360e589878479e15d830d868097f02b2f07d36cc07495916b90438afacc8bc242a2ac01ab233f7d6d869554ca4730b29bf975c8def024e880e83942f4e9a2e3611fc5bab0c26920c11801eb445dc56f4bddbb8139c5b212aff73743ca07e82bd79b79a92f4c250944d683b371e67faf2824b4c5b96c6456d7e7e570008bc5bf438fc9a80b64781e079f9c356a5866730004b8edeec83a37d8a887", 0xc6}], 0x5, &(0x7f00000025c0)=[@rights={0x18, 0x1, 0x1, [r4, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r4, r1, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x20, 0x1, 0x1, [r2, r0, r3, r4]}, @rights={0x38, 0x1, 0x1, [r1, r1, r3, r3, r4, r3, r2, r4, r0, r4]}], 0xf0, 0x20000000}], 0x3, 0x4040044) r20 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x6, 0x108ffd) ioctl$sock_inet6_udp_SIOCINQ(r20, 0x541b, &(0x7f0000000100)) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x2, [@multicast1, @multicast1]}, 0x18) r21 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) read$FUSE(r20, &(0x7f0000003880), 0x1000) ioctl$EVIOCGPROP(r21, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSMAXCID(r21, 0x40107447, &(0x7f0000000240)) dup3(r0, r1, 0x0) 20:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) 20:17:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xc, &(0x7f0000000240)={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1}, 0x8) 20:17:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:52 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400080, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x220, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x77}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x80, 0xfffffffffffffffb}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x15) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) unshare(0x40000000) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000000)={0x0, 0xe, 0x4, 0x20000, {}, {0x0, 0x8, 0x1000, 0x1, 0xec4a, 0xfffffffffffffffe, "2068ed6f"}, 0x10000, 0x4, @offset=0x7, 0x4}) 20:17:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 20:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 222.461734][ T9163] IPVS: ftp: loaded support on port[0] = 21 20:17:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 223.081726][ T9148] syz-executor.0 (9148) used greatest stack depth: 22584 bytes left 20:17:53 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x1e8, r0, 0x302, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35dab55b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf79}]}, @TIPC_NLA_BEARER={0xf4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x100000001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x7fff, 0x0}, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x146a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2a4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe32}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x4}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xeb, 0x1, 0x0, "c92a4314e9700f3fbec3c70aa8dffe90", "f2a78723e4dc5f6fdbbd42c19a4c90c55a79734ccca5563702b7228a5ea8d885e038971872121709350b20ec9646476e2fb582f0dd74862d3277391c25b87d68f975badedaf6b630334b1b6018636da8249d88de516cd8abeab2bfebf9fd507671517f28bf14761aa4475deb653849b59e1332df7a6b90d0cbd32b32fdb2a121d2458cc91e78df89dfc4728a8e0318c7b74aefeb61d43020d41d786ae65da4e0091f0b6005614e109aa3c720f23aa460c726ca229de771148145f727f5c5776592626f21ea9d7f682df535cbec18650c4b05e5814736"}, 0xeb, 0x1) 20:17:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 223.285221][ T9168] IPVS: ftp: loaded support on port[0] = 21 20:17:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="010088b070") syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="1e88f6b1edfbf9de2752e161d50480660107000000000180c2001100130600060100fe75060400010000"], 0x0) 20:17:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:53 executing program 0: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000240), &(0x7f0000000200)='.', 0x0, 0x1004, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 20:17:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:53 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6212bff4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f00000002c0)=""/13, &(0x7f0000000780)=[{0x400, 0x22, 0x87, &(0x7f0000000300)=""/34}, {0xfe, 0xdc, 0x0, &(0x7f0000000340)=""/220}, {0x5, 0xb3, 0x6, &(0x7f00000004c0)=""/179}, {0xffffffff00000001, 0x7, 0x3, &(0x7f0000000440)=""/7}, {0x7ff, 0x96, 0x3, &(0x7f00000006c0)=""/150}, {0x81, 0x1d, 0x88ea, &(0x7f0000000580)=""/29}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r3) fcntl$getown(r1, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = getpid() r5 = getpgid(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) ptrace$setopts(0x4206, r5, 0x7ff, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r2, 0xa, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', 0x100}) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r7) 20:17:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x40, 0x0) memfd_create(0x0, 0x200000000000001) r1 = socket$inet6(0xa, 0x2000000000000001, 0xb9e) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0xfffffffffffffc67) listen(r1, 0x100000000000000a) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$apparmor_exec(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x43}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x4, 0x101}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x0) bind$inet6(r4, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) bind$can_raw(r2, &(0x7f0000000600)={0x1d, r5}, 0x5d214dcd) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) sched_setscheduler(r7, 0x5, &(0x7f0000000380)=0x8ee1) sendmsg(r6, &(0x7f0000000900)={&(0x7f00000003c0)=@hci={0x1f, r5, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)="4cf75dbefa81c9f33d61e1ed63cb8e595eb542cb0b131b2fe3a8b458133a33bccdbb83caccdc08381b797b7c78d68e1977fccf96641581cc25ce323cba5bcb32897c5678a1062b209b35140904be78e3271c723f6828642f7f613f68f4b36c1d9066f9b9958bf7d66a686c", 0x6b}, {&(0x7f00000007c0)="b553f900c18e85b60bcf2f21f6ce84dce9e637c05992a54c6aa9cbcfef97c4748525b19ad74e0d610befa1c1653ceec80244042e51138b8661cff769835446a11a3444987e8b802b77e99d3444356335f0278d24bb058fb8bbde2aace9f3a27f7d9e761f5c9c81fc7e0affeef0fc00f63871830c58e060fe7d21b131c7cc6d365294f4c412f348fd83d515bbd4f0cc9cf9ef21efcf1c767c8050e74a7c14b4bdb08eb1cdf85360462805e67ac0c9be20bc637f6f80cfcb871034631f8ff2e4eb747109bbce504a7c499ae5f3", 0xcc}, {&(0x7f0000000440)="eb5be626e709be81ad68b5b200bf42c45d5ca4303cb476abfea510cfe6424e3eabf8423830a766fa3c801e02697d1537c9d30453eae7a01af08f", 0x3a}], 0x3}, 0x40000) getsockopt$inet_dccp_buf(r6, 0x21, 0xf, &(0x7f0000000080)=""/127, &(0x7f0000000140)=0x7f) getsockopt$inet_udp_int(r6, 0x11, 0x6f, &(0x7f0000000280), &(0x7f0000000340)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) 20:17:53 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0xa, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:54 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:54 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6212bff4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f00000002c0)=""/13, &(0x7f0000000780)=[{0x400, 0x22, 0x87, &(0x7f0000000300)=""/34}, {0xfe, 0xdc, 0x0, &(0x7f0000000340)=""/220}, {0x5, 0xb3, 0x6, &(0x7f00000004c0)=""/179}, {0xffffffff00000001, 0x7, 0x3, &(0x7f0000000440)=""/7}, {0x7ff, 0x96, 0x3, &(0x7f00000006c0)=""/150}, {0x81, 0x1d, 0x88ea, &(0x7f0000000580)=""/29}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r3) fcntl$getown(r1, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = getpid() r5 = getpgid(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) ptrace$setopts(0x4206, r5, 0x7ff, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r2, 0xa, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', 0x100}) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r7) 20:17:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4, @loopback}, 0x80, 0x0}, 0x0) 20:17:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 224.650585][ T26] audit: type=1804 audit(1553199474.595:43): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/42/file0/bus" dev="ramfs" ino=33871 res=1 20:17:55 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6212bff4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f00000002c0)=""/13, &(0x7f0000000780)=[{0x400, 0x22, 0x87, &(0x7f0000000300)=""/34}, {0xfe, 0xdc, 0x0, &(0x7f0000000340)=""/220}, {0x5, 0xb3, 0x6, &(0x7f00000004c0)=""/179}, {0xffffffff00000001, 0x7, 0x3, &(0x7f0000000440)=""/7}, {0x7ff, 0x96, 0x3, &(0x7f00000006c0)=""/150}, {0x81, 0x1d, 0x88ea, &(0x7f0000000580)=""/29}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r3) fcntl$getown(r1, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = getpid() r5 = getpgid(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) ptrace$setopts(0x4206, r5, 0x7ff, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r2, 0xa, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', 0x100}) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r7) 20:17:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xf, @loopback}, 0x80, 0x0}, 0x0) 20:17:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:55 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:55 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6212bff4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f00000002c0)=""/13, &(0x7f0000000780)=[{0x400, 0x22, 0x87, &(0x7f0000000300)=""/34}, {0xfe, 0xdc, 0x0, &(0x7f0000000340)=""/220}, {0x5, 0xb3, 0x6, &(0x7f00000004c0)=""/179}, {0xffffffff00000001, 0x7, 0x3, &(0x7f0000000440)=""/7}, {0x7ff, 0x96, 0x3, &(0x7f00000006c0)=""/150}, {0x81, 0x1d, 0x88ea, &(0x7f0000000580)=""/29}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r3) fcntl$getown(r1, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = getpid() r5 = getpgid(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) ptrace$setopts(0x4206, r5, 0x7ff, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r2, 0xa, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', 0x100}) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r7) 20:17:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xf00, @loopback}, 0x80, 0x0}, 0x0) [ 225.644946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.650792][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:17:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x34000, @loopback}, 0x80, 0x0}, 0x0) 20:17:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x40000, @loopback}, 0x80, 0x0}, 0x0) 20:17:55 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 226.012443][ T26] audit: type=1804 audit(1553199475.955:44): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/43/file0/bus" dev="ramfs" ino=33216 res=1 20:17:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x6, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) 20:17:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x400300, @loopback}, 0x80, 0x0}, 0x0) 20:17:56 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:17:56 executing program 4: mkdir(0x0, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:56 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000000000045, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6212bff4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') ioctl$TIOCCONS(r1, 0x541d) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000840)={0x6, &(0x7f00000002c0)=""/13, &(0x7f0000000780)=[{0x400, 0x22, 0x87, &(0x7f0000000300)=""/34}, {0xfe, 0xdc, 0x0, &(0x7f0000000340)=""/220}, {0x5, 0xb3, 0x6, &(0x7f00000004c0)=""/179}, {0xffffffff00000001, 0x7, 0x3, &(0x7f0000000440)=""/7}, {0x7ff, 0x96, 0x3, &(0x7f00000006c0)=""/150}, {0x81, 0x1d, 0x88ea, &(0x7f0000000580)=""/29}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r3) fcntl$getown(r1, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = getpid() r5 = getpgid(r4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) ptrace$setopts(0x4206, r5, 0x7ff, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r2, 0xa, 0x2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', 0x100}) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/39) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) close(r7) 20:17:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xf000000, @loopback}, 0x80, 0x0}, 0x0) 20:17:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\\\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r1, 0x1, 0x8001}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'sha224\x00'}}, &(0x7f00000001c0)="6cfd9526c50039bc3b4a6b877a0a9f3c7f961939e49c089d564258a22ee19e811098b6a8b6aa384ff9e02dfe5b02af339e71e4c6d6ef566d1d37594b9a2574e2e1c89ca7d25df1144ce62fe3f1425b7587c471493e6d583b18564401872ac062ec6c7e09a2209da13b11060fcba0133d90cc93ab8ae65efc6e2f49c484822c1bf773d6800c25361aaa9f3ba03e533ddfb5573cf0ac485e80d650189167e5cf0737091de08bc8a89c8dfbaff875f2e271b1d3a61acd0556f87afbb37a156b64c6b7c1914f6b86a0bfd6b4b47c2328", &(0x7f00000002c0)=""/95) bind$rds(r0, &(0x7f0000000000)={0x2, 0x1, @local}, 0x10) 20:17:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:56 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:17:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xffffff7f, @loopback}, 0x80, 0x0}, 0x0) 20:17:56 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x12000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x210, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffff000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40880}, 0x40) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0x87, @multicast2, 0x4e20, 0x1, 'sed\x00', 0x20, 0x8, 0x5b}, {@remote, 0x4e22, 0x2000, 0x100, 0x80008000, 0x101}}, 0x44) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080), 0x0) 20:17:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4000000000000, @loopback}, 0x80, 0x0}, 0x0) 20:17:56 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:56 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e1c, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x32d) fcntl$getflags(r0, 0x3) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x20}, 0x2) getsockopt$sock_int(r2, 0x1, 0x3b, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x80400) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x3, 0x28, [], 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)=""/40}, &(0x7f0000000340)=0x78) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) sendmsg$netlink(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)={0x28c, 0x24, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x100, 0x81, [@typed={0xc, 0x87, @u64=0x7}, @generic="2ac5251cad352df4f5c20e4bbcb766c6f72c2ab2a2faf83afbc9c73d84039cc3f6aab5888f28a99c140db0eff6715f0cab1fc82f36ceb8f95e0dfcb16c3306ea86563ede69e4634725dea6524b564903994c826c49e52f02668a4e7e41d47f4799d7411518a2b509709d", @generic="3f4862bc266b745fbaf98e7b1e47c799a1b06f49dadc80a1f618f4a0b2e2ad52ed2245cc6fc546f2ac4186ba3e67a8f41a7674a7cc5d37ee383441a7a420f22a9fbb4aae40ca18", @typed={0x8, 0x83, @u32=0x8}, @generic="b8a10493b8d98cbae138a9aea219d2bf1dbf6dbe28b7658e48938a94ee4a36be2db90d4e483e47b7ddb55c0d43ac", @typed={0x8, 0x7d, @u32=0x5}]}, @typed={0x8, 0x7e, @uid=r4}, @generic="8243840a50f2f015498bd839fe54bcf525d8e403ea51edfd506a1a829f24f976f88fdba3c1a7c28ce35869fa594ab1454ddaba021c2b46913965181d150fefaadc91ed19309d1ada9fad40c84649d941bd2964bb143c4f73ee0c751e0b3fde65aa28f8ae7de41ce24b4b60949190cb1d5791b698985dd15360935a3f6aeb6d204320dd92d4309ec4dd78cc3309b61d5f185915579048dc11f3477a44240297a26d", @generic="bff8e67cd1eca9645e68d800ad977dd7c8128500eba1666f2c4dd062a229229539c761ad24f7f3eca46f14e7d4f62855d625cb136feaa60bfd297cea23469d281dd7ccbc3316a2f10d6ccc917f1e619e6e0c9d7c4369225ba89c332488e4640aa3bb0874a9f84b9dca43819d4430deae77077b053cc9f68ca4c30922d6825abe7f68dbddbb745a7cc8e2fc7b1b8c832b6393c17c12e5aec9f6870666cde8cae29850e3b0bcfe8b35ca4a3de39f9f9f39d6e703e1d1cbd7f26a4041143d87f0a23f17d9136998c1feae33", @typed={0x8, 0x17, @ipv4=@broadcast}]}, 0x28c}, {&(0x7f0000000780)={0x188, 0x27, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@generic="5e29fb397cefe620c5a3a7949865c823abca898f5dc6b8a1120abe1e12ff414939f8581dc41861667bccde447069c2f449c67ee6102265c502540cd0e826e9a67a94bd39df50b19ba2135dd049f19c40ba3c48def9355ebe91c8678f52bc93176a74e1bac82377c7cc26112f89f9d5f78ba598dbfcac30ebfe149f45434d6aaa8e7bb7685d3802aa54a9bf2741019c695072882445b11252611e3a3773dc761e8aa0", @generic="08a2cb1ca51c34e07ad22816a8e58b6b8972bff4e98648e1ce87c9a7b44f944de1ebbf2624a9f02bc6fc4d6caa05d647273567ec218adaf32c15297d831b6122a7a9e10b55", @generic="687a2782f7656dda7ca6979f3668aa934b5c9d21f3d4e74998f92b45333bf7cdf905184f9ef241825630a4492a5fbcd0e8d8b62f20e994cf3c2c62c90ab93b022ee18c949a8deaae8f35b9f8326476a242bd2387a405e9d27d43a8e6e0e7e00087ebc71f46c7c7f0fcb0c9f4b76aed1925038f8734816ce191d8cca1239227883938640314d83f22a024255e49fdda"]}, 0x188}], 0x2, 0x0, 0x0, 0x48000}, 0x8000) 20:17:57 executing program 4: mkdir(0x0, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) r2 = syz_open_procfs(0x0, 0x0) sync_file_range(r0, 0xfffffffffffffffc, 0x400, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0}, 0x45) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000480)={0x752, 0x9f2, 0x4, 0x1f, 0xffffffffffffffc1, 0x3a53}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x10c00) pipe(0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000680)={0x0, 0x8, 0x9, 0x4}, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7, &(0x7f00000000c0)={0xfff}, 0x8) 20:17:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x40030000000000, @loopback}, 0x80, 0x0}, 0x0) 20:17:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xf00000000000000, @loopback}, 0x80, 0x0}, 0x0) 20:17:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:57 executing program 4: mkdir(0x0, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0xffffff7f00000000, @loopback}, 0x80, 0x0}, 0x0) 20:17:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) r2 = syz_open_procfs(0x0, 0x0) sync_file_range(r0, 0xfffffffffffffffc, 0x400, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0}, 0x45) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000480)={0x752, 0x9f2, 0x4, 0x1f, 0xffffffffffffffc1, 0x3a53}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x10c00) pipe(0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000680)={0x0, 0x8, 0x9, 0x4}, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7, &(0x7f00000000c0)={0xfff}, 0x8) [ 227.724935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 227.735878][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:17:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0x7f000002}, 0x80, 0x0}, 0x0) 20:17:57 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 20:17:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = getpgid(0xffffffffffffffff) arch_prctl$ARCH_GET_CPUID(0x1011) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) sched_setparam(r3, &(0x7f0000000200)=0x400000000024) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f7f27add24b5515c1b6046e9ee08e6cbd56620000000000000000cb"]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x26a, &(0x7f0000002040)=[{&(0x7f0000000080)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x100000000000000, 0x3, 0xf002, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:58 executing program 0: r0 = eventfd(0x4000080) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="0000ddff6d874e96", 0x8}], 0x1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) 20:17:58 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{0x0}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x9) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) semget(0x0, 0x6, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) accept4$inet(r2, 0x0, &(0x7f00000002c0), 0x80000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x10}, @remote, @rand_addr="438b417ef7169138038d289eaefaa458", 0xfffffffffffffff8, 0x6, 0x5, 0x100, 0x8, 0x20000, r4}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000300)={0x7f, 0xffff, 0xffffffffffffff80, 0x0, 0x0, 0x22, &(0x7f0000000100)=""/34, 0x6b, &(0x7f0000000140)=""/107}) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) 20:17:58 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000001600)=ANY=[@ANYRESDEC], 0x14) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) 20:17:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:58 executing program 0: sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x13e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 20:17:58 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR], 0x8) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000000)="dbf9146260a86abbcd8b75f6b0661a1c06054327b6ae501f082ef6f93a2927622a93292469e8fe848ae2ab439b64", 0x2e) 20:17:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 228.883357][ T26] audit: type=1804 audit(1553199478.825:45): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/47/file0/bus" dev="ramfs" ino=34421 res=1 20:17:59 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:59 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x100) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000040)=""/189) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x4}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000004c0)=[@release={0x40086303}, @transaction={0x40406300, {0x40406301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:17:59 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:17:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:59 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="0100aa0041c396ad7df0c291ab730407f6a54ac9dbebaa4da4b0e2ec437c14cc340823dcc15076279d8f9c6c6813d313817ed53f02bfa97f60d3480c9712bc1cb8384fe1edac0b0d61769634285bff2255c582502ac5a734de71904f762b845b436c07e81d3aaa8850b381019b6f88ec2b324428b75d9a10f486b829d40bbb3574c528a21dc4ae87570589a9a5e8365f5b3f279d181f8339e0a0564996cd572864a5ec1afe6f02e15141e87bccbe31884da10a19d38610df92d246f0e5"]) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0xffffffff, 0x4) 20:17:59 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:17:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:17:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:17:59 executing program 0: r0 = socket(0x10, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xffffffffffffff89) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x5, 0x3a23f551, 0xfffffffffffffff8}) sendfile(r0, r1, 0x0, 0x80000002) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) [ 229.957321][ T26] audit: type=1804 audit(1553199479.905:46): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/71/file0/bus" dev="ramfs" ino=34482 res=1 20:18:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:00 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc000, 0x101000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 20:18:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:00 executing program 0: futex(&(0x7f0000000140)=0x1, 0x9, 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)=0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x1, 0x1, 0x2, 0x20, 0x4, 0x2605}, 0x4}, 0xa) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000100)=0x3, 0x4) keyctl$set_timeout(0xf, r0, 0xff) keyctl$revoke(0x3, r0) 20:18:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8901, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) r2 = socket$inet(0x2, 0x8000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x17, 0x0, 0x0) 20:18:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x40, 0x3, {0x3, 0x1, 0xffff, 0x3, 0x8c35}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8901, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) r2 = socket$inet(0x2, 0x8000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x17, 0x0, 0x0) 20:18:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:00 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:00 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x488440, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000, r2}) seccomp(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0x4fffc}]}) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x20006080, 0x0}, 0x0) 20:18:01 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) lsetxattr$security_selinux(0x0, &(0x7f0000004ec0)='security.selinux\x00', 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000004f00)='bbr\x00', 0x234) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000004e80)) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 20:18:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xd0b, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL]}, 0x37}}, 0x0) 20:18:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 231.276702][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 231.334639][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:01 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x101, 0x2, 0x8, 0x80000000, 0x3, r3}, 0x20) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) 20:18:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 231.666218][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:18:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x101, 0x2, 0x8, 0x80000000, 0x3, r3}, 0x20) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) 20:18:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:02 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x3, 0x5, 0x101, 0x2, 0x8, 0x80000000, 0x3, r3}, 0x20) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) 20:18:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 232.234377][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 232.262741][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:18:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:02 executing program 0: r0 = semget$private(0x0, 0x5, 0x20000000000000) semop(r0, &(0x7f0000000080)=[{0x0, 0x5}, {}], 0x2) semop(r0, &(0x7f0000000040)=[{}, {0x3, 0xffffffff}], 0x2) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000140)=0x14) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast2, 0x4e22, 0x7, 0x4e20, 0x11, 0xa, 0x1c4da446f057e021, 0x20, 0x7f, r2, r3}, {0x401, 0x7, 0x4, 0x0, 0x3000000000000000, 0x3e, 0x100, 0x1}, {0x4, 0x9, 0x66}, 0xffffffff, 0x6e6bbc, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x3, 0x3, 0x5, 0x3, 0x8, 0x6}}, 0xe8) semop(r0, &(0x7f0000000380)=[{0x3, 0x4, 0x800}, {0x3, 0x5, 0x1000}, {0x1, 0x7}, {0x4, 0x10001, 0x800}, {0x3, 0x2, 0x1000}, {0x0, 0x1, 0x1800}, {0x1, 0x9, 0x1000}], 0x7) semop(r0, &(0x7f0000000240)=[{0x3, 0x7fff}], 0x1) 20:18:02 executing program 3: socket$inet(0x10, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) fallocate(r0, 0x0, 0x8000, 0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:02 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:02 executing program 3: socket$inet(0x10, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) fallocate(r0, 0x0, 0x8000, 0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 20:18:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8042) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x30, "180a333a80e4ca94614430502fb7e412b202951f051945ff4d37a78f95ce3fa21335abb895962acec3159f70c0578fd6"}, &(0x7f0000000140)=0x38) ioctl$VIDIOC_S_INPUT(r0, 0xc0285629, &(0x7f0000000000)=0x3) 20:18:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:02 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) openat$cgroup_subtree(r0, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x0, 0x204801) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_procfs(r1, &(0x7f0000000500)='sched\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x45) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140), 0x1c) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x801) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100), 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000780)={0x0, 0xfb, 0xa6, 0x7, 0x8d, "82ee66b3b6a3b1178b14c0a57a824a2f", "2287eee512959d38f08f1dda6259764deca688a9336ecb28bbedfd35a9a553a006256dc0dfb141bf41b8db4b528f75a0c1dc5d8228a569246b1bf15b1a75636e0ea250c2cb00b82a913794e5f31a221b5d42000e06874637b3d386fb2716c700d08e3395be0a8c41ba167eaba0cc9c624fe924792057ee3d36937d60dbda884d1cafbb9674aedd2f2a0473c54ea8ea6dfc"}, 0xa6, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x128, r6, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendfile(r4, r5, &(0x7f0000000000), 0x10c00) pipe(0x0) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000040), 0x0) 20:18:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8042) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x30, "180a333a80e4ca94614430502fb7e412b202951f051945ff4d37a78f95ce3fa21335abb895962acec3159f70c0578fd6"}, &(0x7f0000000140)=0x38) ioctl$VIDIOC_S_INPUT(r0, 0xc0285629, &(0x7f0000000000)=0x3) 20:18:03 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:03 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vxcan1\x00', 0x1b5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000001c0)={0x7, 0x5}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000200)={0x2, 0x0, 0x18}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x9) sendto(r0, &(0x7f0000000100)="bc", 0x1, 0x0, 0x0, 0x0) 20:18:03 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:03 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0xddffffffffffffff) 20:18:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000000)={@empty, @multicast1, 0x0}, &(0x7f0000000200)=0xc) connect(r0, &(0x7f0000000240)=@can={0x1d, r2}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000069101c0000000000950000000000000030cdbda4ff891b080177604060f1fde0a0c02e62a57653a01b29b956fd462d0caa74413e65f76401e808000000145e324e15f49c49de7e7397c96a50c786137f5a2b5c6b9db51ed8880d1d0a983419a0d5cb05f214a2c6c62f1c3efe460f3756ef96e01d72d0c257dff742c0452cb6102a49ba37eca36c1876c7e00dfa439f95d5db7a1f0af8b11b718ca0327e69d0a07f8be8ee67d8ae6af61841d52d6bd313c0d0a535747f05100d27e8ef01f2fe6269148e007014c322e4f80f0bba3b8418a184"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = fcntl$dupfd(r3, 0x406, r1) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000002c0)) dup2(r3, r4) 20:18:03 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:03 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10100, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000100)={0x5, 0xffffffffffff6523, 0x80, 0x5, 0x8}) r3 = syz_open_procfs(r1, &(0x7f0000000740)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xd7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2>Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x90\xb3\xe3\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\xa5\x03\xf7\xaf\xb0\x1d@p5\x9c|\xd3\xdc\xa8\x025\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90') ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000140)={"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"}) getdents(r3, &(0x7f0000000640)=""/194, 0x7f) getdents(r3, &(0x7f0000000ea9)=""/407, 0x197) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000040)={0x1, 0x2}) 20:18:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x4}, 0x0) 20:18:04 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xf}, 0x0) 20:18:04 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xa, 0x404000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 20:18:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1, 0x4b, 0x100000001, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0x1, 0xffffffff}, {0x3, 0x1ff}, 0x4, 0x6, 0x1ff}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00178579ac40b54502074992633c528ee63e9e9119f03a7eb6e6b6029ad1f32c2359929bad4517780ddc5457d9b7013589194832ee0c36b3fc08f0e5296c428b2febce9bc2f78de15e232a06bc7520d9f10900b252e87f96775cf9d0943bf71b98df3b3cf73181002e0998f8e97d42a8e542d43308c6638057fe00249dce92070f5552b9114c96bce7837a6e0cf1a1b1834a04b5c883d744fe9fff571f7eda7dad489fe7b089321d5c8f605acd93bba4b6988763e7ea098b65d6924c021b8f513c5b60932373138000"], 0xc4, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+30000000}}, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), 0x0, 0x1}, 0x20) 20:18:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xf00}, 0x0) 20:18:04 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100), 0x4) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3c3, 0x0, 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x20c2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x34000}, 0x0) [ 234.412828][ T28] Bluetooth: hci1: Frame reassembly failed (-84) [ 234.444965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 234.450808][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:04 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x40000}, 0x0) 20:18:04 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:04 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 236.365858][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 236.372731][ T9875] Bluetooth: hci0: sending frame failed (-49) [ 236.445601][ T12] Bluetooth: hci1: command 0x1003 tx timeout [ 236.452086][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 236.458803][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 238.444982][ T7744] Bluetooth: hci0: command 0x1001 tx timeout [ 238.451222][ T9875] Bluetooth: hci0: sending frame failed (-49) [ 238.525032][ T7744] Bluetooth: hci1: command 0x1001 tx timeout [ 238.531655][ T21] Bluetooth: hci1: Frame reassembly failed (-84) [ 240.525131][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 240.605006][ T12] Bluetooth: hci1: command 0x1009 tx timeout 20:18:14 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001740)={@loopback, 0x0}, &(0x7f0000001780)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000017c0)={@mcast1, 0x5e, r1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000340)={0x4, 0x0, 0x0, @discrete={0x1, 0x8}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) listen(r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0x0, {{0x2, 0x4e24, @local}}}, 0x88) getitimer(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) getpriority(0x2, r2) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x80040) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff9, 0x0, 0x0, 0x1}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) tkill(r3, 0x1) 20:18:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x400300}, 0x0) 20:18:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:14 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:14 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80802, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)=""/247, 0xf7) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0xfffffffffffffd5c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000001c0)='/dev/vga_arbiter\x00'}, 0x30) write$P9_RGETLOCK(r0, &(0x7f0000000240)={0x38, 0x37, 0x2, {0x0, 0x5, 0x0, r1, 0x1a, 'com.apple.system.Security\x00'}}, 0x38) write$P9_RSYMLINK(r0, &(0x7f0000000280)={0x14, 0x11, 0x1, {0x80, 0x3, 0xffffffff}}, 0x14) write$P9_RLINK(r0, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) 20:18:14 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xf000000}, 0x0) 20:18:14 executing program 0: prctl$PR_SVE_SET_VL(0x32, 0x22145) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000a83000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 20:18:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:14 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 244.924958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 244.930857][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="38f50001b50800000000000000e400650013040008"], 0x1}], 0x1}, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f0000000080), 0x1ce) 20:18:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xffffff7f}, 0x0) 20:18:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:17 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:17 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001740)={@loopback, 0x0}, &(0x7f0000001780)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000017c0)={@mcast1, 0x5e, r1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000340)={0x4, 0x0, 0x0, @discrete={0x1, 0x8}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) listen(r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0x0, {{0x2, 0x4e24, @local}}}, 0x88) getitimer(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) getpriority(0x2, r2) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x80040) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000200)={0xfffffffffffffff9, 0x0, 0x0, 0x1}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) tkill(r3, 0x1) 20:18:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 247.725919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 247.732598][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 247.758470][ T26] audit: type=1804 audit(1553199497.705:47): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/60/file0/bus" dev="ramfs" ino=36548 res=1 20:18:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x121040, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xc364) 20:18:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x4000000000000}, 0x0) 20:18:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x37}) 20:18:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 247.852303][ T26] audit: type=1804 audit(1553199497.795:48): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/61/file0/bus" dev="ramfs" ino=36580 res=1 20:18:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x40030000000000}, 0x0) 20:18:17 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x8000, 0x0) write$P9_RREAD(r1, &(0x7f0000000700)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/57, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0xc000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYBLOB='4\x00@A\x00\x00\x00\x00\x00\x00']) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x48400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x5, @multicast1}}, 0x1, 0x1000, 0x3, 0xff, 0x80}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0x8001, 0x0, 0xffffffffffffffff}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x4e21, 0x35, @mcast1, 0x20}}}, 0x88) 20:18:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xf00000000000000}, 0x0) [ 247.940354][ T26] audit: type=1804 audit(1553199497.885:49): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/62/file0/bus" dev="ramfs" ino=36613 res=1 20:18:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xffffff7f00000000}, 0x0) 20:18:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000100)={&(0x7f0000000040)="652e66676466460f382a028f295091eb646736f2460f5ca53af200000f796e10c4825d021c6ec4a105d84ed267646466470fe838c441d1e58708b4d838835ffa0367440f027f0c", {}, 0x80000000, &(0x7f00000000c0)="662b89000000002e400f98fbf2adf3420f5f11c40251afbe8df761cac4e1fd1125cdd6ffff420f5ae72e663e65663e36660f5c41cff2d1eec441bd5620"}, &(0x7f00000001c0)={&(0x7f0000000140)="f3410f936c9000400f99afbd00000067f04380760a00f37d6b470f6729f2f20f0fb500080000b6c4817dde2fc44211abeef2db5300f30faec7", {}, 0x0, &(0x7f0000000180)="2e65266565660f160a440f198032233333c4c381799b17cd0000fe3664d8eec442f923e8c4617de7800cf0ffffcdea0f38caf8364383600071c463ad0e2e00"}, 0x8, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x3}}) 20:18:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x9a}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000860000fffffff3000000bbff02000000000000f700000000000100000000000890786baadb7bcc21b92fc6d44197f81d94dea59e087e92c8b93ac2b25e590012a9ffe4966ecc6317022538a0ae9e7b891cb4e8b6afa46b49e59d219b8abc6c4761d3ad2f09508dea2a2af903dd0bf611d742487ebe05ac95b0ad46c5320c8700e812689f518098102295e7cb9f1c6ed5f93b1900738b9c73c5972afdf37f8c9b64c2d29aef4a14441cc2e2d32c3b7492a0568d604b0af9d0c1b2bf0ae3b1e7288f05765a60"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x401, 0x400044) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000440)={r0, 0x0, 0xff, "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"}) 20:18:20 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 250.847977][ T26] audit: type=1804 audit(1553199500.795:50): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/63/file0/bus" dev="ramfs" ino=36680 res=1 20:18:20 executing program 0: capset(&(0x7f0000000040)={0x400019980330}, &(0x7f0000b2d000)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) dup2(r1, r0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) [ 250.909356][ T26] audit: type=1804 audit(1553199500.855:51): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/64/file0/bus" dev="ramfs" ino=35759 res=1 20:18:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x8007f, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0xf) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="eb01000000ff070000ffffff7fffffffff"]) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x84, 0x0, 0x6}}, 0x14) 20:18:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0) 20:18:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:21 executing program 0: socketpair$unix(0x1, 0x2000000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x0, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xffffffffffffff7f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000280)=0xd6b2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000013002901000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1ae9000000000000ee5a5887be80cfa57a281efcd6c1f07c4b5e7f1dcef1159d58cf5cfccb28754176e6ebbcec2452ba09dbc49ed6e13e2838b7c40265c683df19a2c72c54baa7bbddb16cd497992ab392be0788d3803e00189056068ceadf1135ce2629ebf1fe8d9cd99d903e14258fddc2a5df70e3a117f225b9f8183fc9bcfd20161d498bbe5fe1e7e340d58723cbc46831719c93effcf76b522cabf97ce8152b7e239be1ae89a5ec933923583180"], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:18:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x81, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000600)={0x0, 0x67, "0d755b5b44aa57abc085038d5729f1dc061103ab7806e5011d0ce3fb053d44881409967dc2b989168a1347209ae034a1d38791443092f685de4c17cd0a86a1504361460cbeaad6125e88e03217820c82bffb8acd943158fcc0dbb3d84a599e163b89bb8fc2fcd7"}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r1, 0x7f, 0x4, [0x5, 0x6, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$EVIOCGBITKEY(r2, 0x80404521, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707d71c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60"], 0xde) io_setup(0x101, &(0x7f0000000040)=0x0) r7 = shmget$private(0x0, 0x3000, 0x16a424badf40a786, &(0x7f0000ffd000/0x3000)=nil) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x80, 0x0) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000500)=""/248) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x400) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x201, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x1f, 0xfffffffffffffffa, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e5000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 251.136904][ T26] audit: type=1804 audit(1553199501.085:52): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/65/file0/bus" dev="ramfs" ino=36748 res=1 20:18:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(0x0, 0x0, 0x0) 20:18:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x7fffffff, 0x0, 0x40, 0xfff, 0xce6a, 0x87000000000, 0x0, 0x8, 0x1ff, 0x401, 0x0, 0x7, 0x7}, {0x6, 0x4, 0x1ff, 0xffff, 0x1, 0x7, 0x2, 0x2, 0xfffffffffffffffb, 0x7f, 0x2b, 0x3f, 0x1}, {0x7fff, 0x100000000, 0x1, 0x10000, 0x0, 0x3ff, 0x4, 0x43, 0x8, 0x5, 0x74d, 0x2, 0x8}], 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x3) 20:18:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xf}, 0x0) 20:18:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xf00}, 0x0) 20:18:21 executing program 0: setrlimit(0x40002, &(0x7f0000000140)={0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) 20:18:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x10, &(0x7f0000000000)={r1, 0x10}, 0x8) 20:18:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x34000}, 0x0) 20:18:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @loopback}, 0x8) 20:18:21 executing program 0: 20:18:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x40000}, 0x0) 20:18:21 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(0x0, 0x0, 0x0) 20:18:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:18:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x400300}, 0x0) 20:18:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 252.060517][T10138] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:18:22 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x10) geteuid() prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='./cgroup.cpu\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000000c0)) write$binfmt_elf64(r2, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) getsockname$unix(0xffffffffffffffff, &(0x7f0000000440), 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$getregs(0xc, r4, 0x30, &(0x7f0000000280)=""/108) sendto$inet(r3, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) write$binfmt_script(r3, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x58b) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000300)={0x18, 0x0, 0x8, {0x7}}, 0x18) dup(0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20004081) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xfffffffffffffffe}, 0x18) 20:18:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xf000000}, 0x0) 20:18:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x600081) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)={@void, @val, @ipx={0xffff, 0xfe6, 0x0, 0x0, {@random, @broadcast}, {@random, @random="d7b52e2ab5df"}, "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"}}, 0xff0) 20:18:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 20:18:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) 20:18:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(0x0, 0x0, 0x0) 20:18:22 executing program 0: 20:18:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 20:18:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) 20:18:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 252.687240][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 252.693530][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x117041) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x3, [0x8, 0x0, 0x4]}, 0xa) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)={0x8, 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000), 0x4) 20:18:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x40030000000000}, 0x0) 20:18:22 executing program 0: 20:18:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 20:18:22 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xffffffbb}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fc, 0x0) 20:18:23 executing program 0: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x519) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 20:18:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000100]}) 20:18:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x0) 20:18:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:18:23 executing program 3: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x519) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 20:18:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:23 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 20:18:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 20:18:23 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe06) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x800010b, 0x18) quotactl(0x400, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000002, 0x40800000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r0, 0x5412, &(0x7f0000000240)) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) 20:18:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:18:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f00000001c0)={0x20, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x39d5}, 0x0) 20:18:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 20:18:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 20:18:23 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r1) dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0xfffffffffffffffe) rt_sigtimedwait(0x0, &(0x7f0000000840), 0x0, 0x0) open(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe06) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x800010b, 0x18) quotactl(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000002, 0x40800000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5412, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:23 executing program 0: syz_execute_func(&(0x7f0000001240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vga_arbiter\x00', 0x101, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 20:18:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0) 20:18:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x57}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W\x88\x86\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe?8\xec\x93\a[\x03\x00\x00\x00\x00\x00\x00\x00\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84xR+\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\xa2\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\xda\t\x00\x00\x00\x00\x00\x00\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x5a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x79, &(0x7f0000000040)}, 0xe) 20:18:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x1, 0x0) 20:18:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x0) 20:18:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={0xbf, 0x0, "d10107080000008083d8c7b1d4e9e8bf4084e25dcff4db54bd2e3f29941fdb33a51ebb55eeef5acb7c09255fe0169840d23f485f2ea6aa7f4fbfa49507800000400d1e9daf05942e1f39e93a0d1ba37a20b8e356d8704280201000e81a6004796588ca7ee7c384a14c4968bdcfc31d642751f0b037c4c4cc926b630790ae6eef81c21435307f3cbd2c530cdecd1408654a53a2a5f7bf5f5be1045441b965317cc1cf04af6d7c3dadaf7c945b511ddcf454114efac92a31"}, 0x0, 0x1400) 20:18:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0xa48c9d719322a0, 0x0) 20:18:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)={@multicast2, @local, 0x1}, 0x10) 20:18:24 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_to_team\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x10000000003) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@dev, r1}, 0x14) 20:18:24 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) nanosleep(&(0x7f0000000140), 0x0) 20:18:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x34000}, 0x0) 20:18:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r3) dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0xfffffffffffffffe) rt_sigtimedwait(&(0x7f0000000a00), &(0x7f0000000840), &(0x7f0000000a40)={0x0, 0x989680}, 0x8) open(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe06) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) quotactl(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000002, 0x40800000000031, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r1, 0x5412, &(0x7f0000000240)) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) 20:18:24 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00\xf8\x03\x00\xfc\xff\xff\xff\xff', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003, r2}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="0b34bcd56296", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "43b713", 0x10, 0x0, 0x0, @mcast2, @loopback, {[], @icmpv6=@ndisc_ra}}}}}, 0x0) 20:18:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 20:18:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={0x0, 0x3000, &(0x7f0000000340)={&(0x7f0000000280)={0xffffffffffffffd2}, 0x9b8}}, 0x5000bb8) 20:18:24 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 20:18:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x0) 20:18:24 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000fc440100000000000073013500000000009500d800a3aaf000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 20:18:24 executing program 1: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 20:18:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x0) 20:18:24 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc000000000200002, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x10000100) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x8) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e20, 0x0, @mcast2}, {0xa, 0x0, 0x81, @ipv4={[], [], @multicast2}}, 0x0, [0x7, 0x9, 0x2, 0x8000, 0x0, 0x100000000, 0x827]}, 0x5c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0xc0044dff, &(0x7f0000000140)) ioctl$KVM_NMI(r2, 0xae9a) 20:18:24 executing program 0: 20:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x80000) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) 20:18:24 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) 20:18:24 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 20:18:24 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') 20:18:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) 20:18:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:25 executing program 0: r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/160) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7fd, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)}, 0xffffffffffffffda) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 20:18:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 20:18:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffc, 0x0, 0x820000, 0x0, 0x0, [0x8000000000000000]}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) 20:18:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, 0x0) 20:18:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') dup(r0) 20:18:25 executing program 3: 20:18:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$P9_RRENAMEAT(r0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0xfffffffffffffd41}, 0xfffffffffffffe17) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xffffff35) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/78, 0x4e}, {}], 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0x10, 0x2, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) openat(r3, &(0x7f0000003400)='./file0\x00', 0x0, 0x8) r6 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) utimensat(r6, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f00000033c0)={0x2, 0x0, @initdev}, 0x10) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000240)=0x8) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000003380)=0x8, 0x4) 20:18:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x0) 20:18:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='iC;`\xb6p+\x10', 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 20:18:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') dup(r0) [ 255.560571][T10433] input:  as /devices/virtual/input/input5 [ 255.589046][T10433] input: failed to attach handler leds to device input5, error: -6 20:18:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 255.680999][T10450] input:  as /devices/virtual/input/input6 20:18:25 executing program 1: 20:18:25 executing program 0: 20:18:25 executing program 1: [ 255.818417][T10450] input: failed to attach handler leds to device input6, error: -6 20:18:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:25 executing program 1: 20:18:25 executing program 3: 20:18:26 executing program 4: 20:18:26 executing program 0: 20:18:26 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:26 executing program 1: 20:18:26 executing program 3: 20:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:26 executing program 0: 20:18:26 executing program 1: 20:18:26 executing program 3: 20:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:26 executing program 3: 20:18:26 executing program 0: 20:18:26 executing program 4: 20:18:26 executing program 1: 20:18:26 executing program 0: 20:18:26 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:26 executing program 3: 20:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:26 executing program 1: 20:18:26 executing program 0: 20:18:26 executing program 3: 20:18:26 executing program 4: 20:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:26 executing program 1: 20:18:26 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 20:18:26 executing program 3: 20:18:26 executing program 4: 20:18:26 executing program 0: 20:18:26 executing program 3: 20:18:26 executing program 1: 20:18:26 executing program 0: 20:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:26 executing program 4: 20:18:26 executing program 1: 20:18:26 executing program 3: 20:18:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 20:18:27 executing program 0: 20:18:27 executing program 4: 20:18:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:27 executing program 1: 20:18:27 executing program 0: 20:18:27 executing program 3: 20:18:27 executing program 4: 20:18:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 20:18:27 executing program 1: 20:18:27 executing program 3: 20:18:27 executing program 0: 20:18:27 executing program 4: 20:18:27 executing program 1: 20:18:27 executing program 3: 20:18:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003600)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xd}, 0xfffffffffffffe17) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), 0x0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000280)={r0, &(0x7f0000000080), 0x0}, 0x18) 20:18:27 executing program 4: 20:18:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:18:27 executing program 1: 20:18:27 executing program 4: 20:18:27 executing program 3: 20:18:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x81, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000600)={0x0, 0x67, "0d755b5b44aa57abc085038d5729f1dc061103ab7806e5011d0ce3fb053d44881409967dc2b989168a1347209ae034a1d38791443092f685de4c17cd0a86a1504361460cbeaad6125e88e03217820c82bffb8acd943158fcc0dbb3d84a599e163b89bb8fc2fcd7"}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={r1, 0x7f, 0x4, [0x5, 0x6, 0x8, 0x7fff]}, &(0x7f00000006c0)=0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xff, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$EVIOCGBITKEY(r2, 0x80404521, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="000000008e9464a206bd25e188bc0994ddc3d9575e6dec2aa5588b8bff2e1c2222551fbc604e3e3b37d33db65ff8d115168aaccef4eeb7e1eb24c5700ebdff10ece5ca1f61e06965b298c8ce3dd02c68a147a8ec7063e732be04fec951f934879ed74cfde53d9a4f0dd315fd4b8b8ca68aa7d1b08841e555727e8c767ee245828827867edc7a1153576dd34779fce9ab868692959ceba04e576d3c530d6671d7f1e3a0389707d71c3366af65da074ad23cade2cecfaf942b0b4dd95b532479a7c2c73146d1e82cb0b679aa2aafadc8ff4162836a56718e77701ac5fdce60"], 0xde) io_setup(0x101, &(0x7f0000000040)=0x0) r7 = shmget$private(0x0, 0x3000, 0x16a424badf40a786, &(0x7f0000ffd000/0x3000)=nil) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x80, 0x0) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000500)=""/248) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x400) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x201, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x1f, 0xfffffffffffffffa, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e5000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 20:18:27 executing program 0 (fault-call:9 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:27 executing program 3 (fault-call:5 fault-nth:0): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x3430c3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x92, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000180)=""/146}, &(0x7f00000003c0)=0x78) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000440)={0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) membarrier(0x400005, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@local, @in=@broadcast}}, {{@in=@broadcast}}}, &(0x7f0000000080)=0xa7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:18:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:18:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 257.981598][T10634] FAULT_INJECTION: forcing a failure. [ 257.981598][T10634] name failslab, interval 1, probability 0, space 0, times 1 20:18:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 20:18:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 258.139518][T10634] CPU: 1 PID: 10634 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 258.139906][T10639] kvm: emulating exchange as write [ 258.147543][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.147551][T10634] Call Trace: [ 258.147647][T10634] dump_stack+0x172/0x1f0 [ 258.147708][T10634] should_fail.cold+0xa/0x15 [ 258.147728][T10634] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 258.147787][T10634] ? ___might_sleep+0x163/0x280 [ 258.186047][T10634] __should_failslab+0x121/0x190 [ 258.191021][T10634] should_failslab+0x9/0x14 [ 258.195553][T10634] kmem_cache_alloc+0x2b2/0x6f0 [ 258.200437][T10634] ? kasan_check_write+0x14/0x20 [ 258.205423][T10634] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 258.211036][T10634] getname_flags+0xd6/0x5b0 [ 258.215665][T10634] getname+0x1a/0x20 [ 258.219602][T10634] do_sys_open+0x2c9/0x5d0 [ 258.224046][T10634] ? filp_open+0x80/0x80 [ 258.228455][T10634] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 258.228473][T10634] ? do_syscall_64+0x26/0x610 20:18:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x4) [ 258.228502][T10634] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.228524][T10634] ? do_syscall_64+0x26/0x610 [ 258.228542][T10634] __x64_sys_open+0x7e/0xc0 [ 258.228557][T10634] do_syscall_64+0x103/0x610 [ 258.228574][T10634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.228636][T10634] RIP: 0033:0x458209 [ 258.228653][T10634] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:18:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 258.245074][T10634] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 258.245090][T10634] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 258.245098][T10634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 258.245105][T10634] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.245112][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 258.245119][T10634] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 20:18:28 executing program 3 (fault-call:5 fault-nth:1): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xf) 20:18:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3f, 0x0) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x806, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0xe7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}) 20:18:28 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0xd5, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 20:18:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000000100)={0x0, r1}) 20:18:28 executing program 5 (fault-call:4 fault-nth:0): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xf00) [ 258.566346][T10667] FAULT_INJECTION: forcing a failure. [ 258.566346][T10667] name failslab, interval 1, probability 0, space 0, times 0 20:18:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000100)) close(r0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xa) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e38f431c89e5b505c83031e649949cfa25f4baf4", 0x14, 0x7fd, 0x0, 0x0) 20:18:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syncfs(r0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0xffffffff, "e25d4995dfc3ee853dfd4c582d21f9f9f3947bf3ba4376e0afd8916f96e6b013", 0x2, 0x1}) ioctl$TIOCCONS(r0, 0x541d) [ 258.670589][T10667] CPU: 0 PID: 10667 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #31 [ 258.678606][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.678690][T10667] Call Trace: [ 258.678717][T10667] dump_stack+0x172/0x1f0 [ 258.678740][T10667] should_fail.cold+0xa/0x15 [ 258.678760][T10667] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 258.678793][T10667] ? ___might_sleep+0x163/0x280 [ 258.712086][T10667] __should_failslab+0x121/0x190 20:18:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, 0x1fb) r1 = socket$inet6(0xa, 0x7, 0x7f) unshare(0x20400) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x1, 0x10400) clock_gettime(0x0, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futimesat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {r3, r4/1000+10000}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) r8 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x7000000000000, 0x400) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x2d7a, 0x30, 0xfffffffffffffffc, 0x7ff}, &(0x7f0000000380)=0x18) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000280000e0c93ef7363cadc500010001000200000000020000000100008000000000"]) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000440)={r9, 0x2c, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x7, @ipv4={[], [], @remote}, 0xc97}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000480)=0x10) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x8, 0x0, 0x43, &(0x7f0000ffd000/0x3000)=nil, 0x6}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r7, &(0x7f0000000300)={0x2c, 0x0, r6}, 0x10) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1, r6, 0x34, r7}, 0x10) 20:18:28 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x6a4500, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = inotify_init1(0x80800) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1) [ 258.717062][T10667] should_failslab+0x9/0x14 [ 258.717080][T10667] kmem_cache_alloc+0x2b2/0x6f0 [ 258.717093][T10667] ? __do_munmap+0x8a0/0xef0 [ 258.717115][T10667] vm_area_alloc+0x20/0x110 [ 258.717129][T10667] mmap_region+0x964/0x1770 [ 258.717152][T10667] ? __x64_sys_brk+0x760/0x760 [ 258.744990][T10667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.751334][T10667] ? get_unmapped_area+0x295/0x3b0 [ 258.756461][T10667] do_mmap+0x8e2/0x1080 [ 258.762208][T10667] vm_mmap_pgoff+0x1c5/0x230 [ 258.766823][T10667] ? vma_is_stack_for_current+0xd0/0xd0 [ 258.772410][T10667] ? ksys_dup3+0x3e0/0x3e0 [ 258.776856][T10667] ksys_mmap_pgoff+0x4aa/0x630 [ 258.776876][T10667] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 258.776893][T10667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 258.776907][T10667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 258.776921][T10667] ? do_syscall_64+0x26/0x610 [ 258.776945][T10667] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.792823][T10667] __x64_sys_mmap+0xe9/0x1b0 [ 258.792849][T10667] do_syscall_64+0x103/0x610 [ 258.818417][T10667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.824318][T10667] RIP: 0033:0x458209 [ 258.828225][T10667] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.847930][T10667] RSP: 002b:00007f3d2db90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 258.856360][T10667] RAX: ffffffffffffffda RBX: 00007f3d2db90c90 RCX: 0000000000458209 20:18:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x34000) [ 258.864354][T10667] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000201bf000 [ 258.872432][T10667] RBP: 000000000073bf00 R08: 0000000000000003 R09: 0000000000000000 [ 258.880430][T10667] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3d2db916d4 [ 258.888425][T10667] R13: 00000000004c3ee3 R14: 00000000004d70d8 R15: 0000000000000006 [ 258.896840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 258.902642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 258.924949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 258.930855][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 259.072925][T10708] FAULT_INJECTION: forcing a failure. [ 259.072925][T10708] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.086191][T10708] CPU: 0 PID: 10708 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 259.086203][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.086209][T10708] Call Trace: [ 259.086240][T10708] dump_stack+0x172/0x1f0 [ 259.086264][T10708] should_fail.cold+0xa/0x15 [ 259.107619][T10708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.107656][T10708] ? __lock_acquire+0x548/0x3fb0 [ 259.107685][T10708] should_fail_alloc_page+0x50/0x60 [ 259.132825][T10708] __alloc_pages_nodemask+0x1a1/0x7e0 [ 259.138232][T10708] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 259.143978][T10708] ? find_held_lock+0x35/0x130 [ 259.148777][T10708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.154701][T10708] cache_grow_begin+0x9c/0x860 [ 259.159500][T10708] ? getname_flags+0xd6/0x5b0 [ 259.164205][T10708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.170466][T10708] kmem_cache_alloc+0x62d/0x6f0 [ 259.175428][T10708] ? kasan_check_write+0x14/0x20 [ 259.180381][T10708] getname_flags+0xd6/0x5b0 [ 259.184944][T10708] getname+0x1a/0x20 [ 259.188846][T10708] do_sys_open+0x2c9/0x5d0 [ 259.193279][T10708] ? filp_open+0x80/0x80 [ 259.197641][T10708] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.203106][T10708] ? do_syscall_64+0x26/0x610 [ 259.207798][T10708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.213887][T10708] ? do_syscall_64+0x26/0x610 [ 259.218592][T10708] __x64_sys_open+0x7e/0xc0 [ 259.223118][T10708] do_syscall_64+0x103/0x610 [ 259.227810][T10708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.233728][T10708] RIP: 0033:0x458209 [ 259.237627][T10708] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.257594][T10708] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 259.266019][T10708] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 259.274342][T10708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 259.282319][T10708] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 259.290470][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 259.298471][T10708] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 [ 259.352884][ T26] audit: type=1804 audit(1553199509.295:53): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/117/file0/bus" dev="ramfs" ino=40287 res=1 20:18:29 executing program 3 (fault-call:5 fault-nth:2): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x40000) 20:18:29 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000000000008040, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40001, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 20:18:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5421, &(0x7f0000000100)={0x0, r1}) 20:18:29 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r0, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x8000000000000100, &(0x7f0000000080)="27e4c43dec78ad30c8f6d0dd0d915ef71842ffb4784a191ef6c51ecd4f5d15d129b28189847e13a2ff8ed0dd646820b891cf11ffa35c2600ad87dc87cd969da905e0a7694ac6f4b3fd7446b3ab5ee02b64a71d9b7b90ac6e25bceb49f61942d6821087a2", 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x50) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000100)=""/101) wait4(0x0, 0x0, 0x0, 0x0) getegid() 20:18:29 executing program 5 (fault-call:4 fault-nth:1): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 259.560852][T10723] FAULT_INJECTION: forcing a failure. [ 259.560852][T10723] name failslab, interval 1, probability 0, space 0, times 0 [ 259.574226][T10723] CPU: 1 PID: 10723 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #31 [ 259.582233][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.592837][T10723] Call Trace: [ 259.597210][T10723] dump_stack+0x172/0x1f0 [ 259.602795][T10723] should_fail.cold+0xa/0x15 [ 259.607674][T10723] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.613774][T10723] ? ___might_sleep+0x163/0x280 [ 259.618652][T10723] __should_failslab+0x121/0x190 [ 259.623877][T10723] should_failslab+0x9/0x14 [ 259.628579][T10723] __kmalloc+0x2dc/0x740 [ 259.632855][T10723] ? find_held_lock+0x35/0x130 [ 259.637740][T10723] ? percpu_ref_put_many+0x94/0x190 [ 259.643319][T10723] ? rb_alloc+0x99/0x500 [ 259.647678][T10723] rb_alloc+0x99/0x500 [ 259.647774][T10723] perf_mmap+0x116c/0x1800 [ 259.647798][T10723] ? perf_release+0x50/0x50 [ 259.647817][T10723] ? memset+0x32/0x40 [ 259.647834][T10723] mmap_region+0xc3a/0x1770 [ 259.647864][T10723] ? __x64_sys_brk+0x760/0x760 [ 259.674698][T10723] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.681327][T10723] ? get_unmapped_area+0x295/0x3b0 [ 259.686459][T10723] do_mmap+0x8e2/0x1080 [ 259.686483][T10723] vm_mmap_pgoff+0x1c5/0x230 [ 259.686508][T10723] ? vma_is_stack_for_current+0xd0/0xd0 [ 259.686529][T10723] ? ksys_dup3+0x3e0/0x3e0 [ 259.695558][T10723] ksys_mmap_pgoff+0x4aa/0x630 20:18:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x400300) [ 259.695578][T10723] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 259.695594][T10723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.695608][T10723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.695621][T10723] ? do_syscall_64+0x26/0x610 [ 259.695636][T10723] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.695652][T10723] __x64_sys_mmap+0xe9/0x1b0 [ 259.695671][T10723] do_syscall_64+0x103/0x610 [ 259.695689][T10723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.695701][T10723] RIP: 0033:0x458209 [ 259.695715][T10723] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.695723][T10723] RSP: 002b:00007f3d2db90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 259.695744][T10723] RAX: ffffffffffffffda RBX: 00007f3d2db90c90 RCX: 0000000000458209 [ 259.726915][T10732] FAULT_INJECTION: forcing a failure. [ 259.726915][T10732] name failslab, interval 1, probability 0, space 0, times 0 20:18:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xf000000) 20:18:29 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000500)=@v2, 0x14, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x1) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 259.727908][T10723] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000201bf000 [ 259.727917][T10723] RBP: 000000000073bf00 R08: 0000000000000003 R09: 0000000000000000 [ 259.727926][T10723] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3d2db916d4 [ 259.727935][T10723] R13: 00000000004c3ee3 R14: 00000000004d70d8 R15: 0000000000000006 20:18:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xffffff7f) [ 259.943883][T10732] CPU: 1 PID: 10732 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 259.951908][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.962244][T10732] Call Trace: [ 259.965556][T10732] dump_stack+0x172/0x1f0 [ 259.969908][T10732] should_fail.cold+0xa/0x15 [ 259.974559][T10732] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 259.980661][T10732] ? ___might_sleep+0x163/0x280 20:18:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x4000000000000) [ 259.985907][T10732] __should_failslab+0x121/0x190 [ 259.994964][T10732] should_failslab+0x9/0x14 [ 259.999589][T10732] kmem_cache_alloc+0x2b2/0x6f0 [ 260.004570][T10732] ? __save_stack_trace+0x99/0x100 [ 260.009716][T10732] __alloc_file+0x27/0x300 [ 260.014165][T10732] alloc_empty_file+0x72/0x170 [ 260.019051][T10732] path_openat+0xef/0x46e0 [ 260.023493][T10732] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 260.029502][T10732] ? kasan_slab_alloc+0xf/0x20 [ 260.035724][T10732] ? kmem_cache_alloc+0x11a/0x6f0 [ 260.041322][T10732] ? getname_flags+0xd6/0x5b0 [ 260.046717][T10732] ? getname+0x1a/0x20 [ 260.050809][T10732] ? do_sys_open+0x2c9/0x5d0 [ 260.055442][T10732] ? __x64_sys_open+0x7e/0xc0 [ 260.060327][T10732] ? do_syscall_64+0x103/0x610 [ 260.065324][T10732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.071779][T10732] ? __lock_acquire+0x548/0x3fb0 [ 260.076744][T10732] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 260.082152][T10732] ? __alloc_fd+0x430/0x530 [ 260.086682][T10732] do_filp_open+0x1a1/0x280 20:18:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x40030000000000) [ 260.091209][T10732] ? may_open_dev+0x100/0x100 [ 260.095916][T10732] ? lock_downgrade+0x880/0x880 [ 260.100790][T10732] ? kasan_check_read+0x11/0x20 [ 260.105689][T10732] ? do_raw_spin_unlock+0x57/0x270 [ 260.111368][T10732] ? _raw_spin_unlock+0x2d/0x50 [ 260.118278][T10732] ? __alloc_fd+0x430/0x530 [ 260.123738][T10732] do_sys_open+0x3fe/0x5d0 [ 260.128464][T10732] ? filp_open+0x80/0x80 [ 260.132770][T10732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.138259][T10732] ? do_syscall_64+0x26/0x610 [ 260.143070][T10732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.150078][T10732] ? do_syscall_64+0x26/0x610 [ 260.154884][T10732] __x64_sys_open+0x7e/0xc0 [ 260.159430][T10732] do_syscall_64+0x103/0x610 [ 260.164164][T10732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.170084][T10732] RIP: 0033:0x458209 [ 260.174270][T10732] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.199125][T10732] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 260.205008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 260.208362][T10732] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 260.214321][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 260.222337][T10732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 260.222347][T10732] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 260.222354][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 260.222361][T10732] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 [ 260.285024][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:18:30 executing program 3 (fault-call:5 fault-nth:3): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xf00000000000000) [ 260.291862][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3f, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x0, 0xfffffffffffffdb0, 0x0, 0x0) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) io_submit(r2, 0x1404, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 20:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000007fffffff000000000000000000000000429e4bb5029308fbade9199644cc73c216364a61d51f35a4615bc99ffbcca75d8ee80a479d5c7b64f44f9e95120bd6fa9b02ebef6d678c05209234a94ed7e835a7c2b88dd37fd000769821b256bef46084942b7f2311db7f6be283c9cbabe32afc8f40d5ba78c209fe74e9cb9899f80b956cc5a09c8032825c02cabd63efbcc60f650decae966afd34e1d66628a7a0bb4fcf992ab3b1bdbf5db92ea328236ece4ea9ac4981707996351458ae18c88e60ae2c9c9ed51a42ffcdae67eba039e3d0a735bbaaace760f8aa94ce71d2fed2173d9ff1177ab4ba37fc617503d1d1f098e660ed14a80639d6914ae24dcce80be6cf22aa1dc3c10bc0d2d7ca34733abedf2ec5f528ab96bd"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:30 executing program 5 (fault-call:4 fault-nth:2): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5450, &(0x7f0000000100)={0x0, r1}) 20:18:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xffffff7f00000000) [ 260.502641][T10781] FAULT_INJECTION: forcing a failure. [ 260.502641][T10781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.543626][T10781] CPU: 0 PID: 10781 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #31 [ 260.552704][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.562775][T10781] Call Trace: [ 260.566081][T10781] dump_stack+0x172/0x1f0 [ 260.570444][T10781] should_fail.cold+0xa/0x15 [ 260.575241][T10781] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 260.581316][T10781] ? ___might_sleep+0x163/0x280 [ 260.586214][T10781] should_fail_alloc_page+0x50/0x60 [ 260.592052][T10781] __alloc_pages_nodemask+0x1a1/0x7e0 [ 260.597809][T10781] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 260.603997][T10781] ? __kmalloc+0x5d5/0x740 [ 260.609223][T10781] ? find_held_lock+0x35/0x130 [ 260.614368][T10781] ? percpu_ref_put_many+0x94/0x190 [ 260.619982][T10781] perf_mmap_alloc_page+0x5d/0xd0 [ 260.625216][T10781] rb_alloc+0xae/0x500 [ 260.631848][T10781] perf_mmap+0x116c/0x1800 [ 260.637690][T10781] ? perf_release+0x50/0x50 [ 260.642600][T10781] ? memset+0x32/0x40 [ 260.646985][T10781] mmap_region+0xc3a/0x1770 [ 260.651807][T10781] ? __x64_sys_brk+0x760/0x760 [ 260.657030][T10781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.663293][T10781] ? get_unmapped_area+0x295/0x3b0 [ 260.668548][T10781] do_mmap+0x8e2/0x1080 [ 260.672737][T10781] vm_mmap_pgoff+0x1c5/0x230 [ 260.677623][T10781] ? vma_is_stack_for_current+0xd0/0xd0 [ 260.683197][T10781] ? ksys_dup3+0x3e0/0x3e0 [ 260.687699][T10781] ksys_mmap_pgoff+0x4aa/0x630 [ 260.692517][T10781] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 260.698205][T10781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.703862][T10781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.709332][T10781] ? do_syscall_64+0x26/0x610 [ 260.714049][T10781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.720134][T10781] __x64_sys_mmap+0xe9/0x1b0 [ 260.724924][T10781] do_syscall_64+0x103/0x610 [ 260.729708][T10781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.735634][T10781] RIP: 0033:0x458209 [ 260.739536][T10781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.759178][T10781] RSP: 002b:00007f3d2db90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 260.768721][T10781] RAX: ffffffffffffffda RBX: 00007f3d2db90c90 RCX: 0000000000458209 [ 260.776712][T10781] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000201bf000 [ 260.784720][T10781] RBP: 000000000073bf00 R08: 0000000000000003 R09: 0000000000000000 20:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) [ 260.792833][T10781] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3d2db916d4 [ 260.800817][T10781] R13: 00000000004c3ee3 R14: 00000000004d70d8 R15: 0000000000000006 [ 260.815441][T10799] FAULT_INJECTION: forcing a failure. [ 260.815441][T10799] name failslab, interval 1, probability 0, space 0, times 0 [ 260.837607][T10799] CPU: 0 PID: 10799 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 260.845731][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.855974][T10799] Call Trace: [ 260.859285][T10799] dump_stack+0x172/0x1f0 [ 260.863637][T10799] should_fail.cold+0xa/0x15 [ 260.868346][T10799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 260.874160][T10799] ? ___might_sleep+0x163/0x280 [ 260.879021][T10799] __should_failslab+0x121/0x190 [ 260.883985][T10799] should_failslab+0x9/0x14 [ 260.888503][T10799] kmem_cache_alloc+0x2b2/0x6f0 [ 260.893368][T10799] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.899109][T10799] ? kmem_cache_alloc+0x32e/0x6f0 [ 260.904161][T10799] security_file_alloc+0x39/0x170 [ 260.909200][T10799] __alloc_file+0xac/0x300 [ 260.913707][T10799] alloc_empty_file+0x72/0x170 [ 260.919181][T10799] path_openat+0xef/0x46e0 [ 260.923699][T10799] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 260.929534][T10799] ? kasan_slab_alloc+0xf/0x20 [ 260.934649][T10799] ? kmem_cache_alloc+0x11a/0x6f0 [ 260.939683][T10799] ? getname_flags+0xd6/0x5b0 [ 260.944543][T10799] ? getname+0x1a/0x20 [ 260.949085][T10799] ? do_sys_open+0x2c9/0x5d0 [ 260.953790][T10799] ? __x64_sys_open+0x7e/0xc0 [ 260.959007][T10799] ? do_syscall_64+0x103/0x610 [ 260.963964][T10799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.970147][T10799] ? __lock_acquire+0x548/0x3fb0 [ 260.975185][T10799] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 260.980584][T10799] ? __alloc_fd+0x430/0x530 [ 260.985093][T10799] do_filp_open+0x1a1/0x280 [ 260.989693][T10799] ? may_open_dev+0x100/0x100 [ 260.994387][T10799] ? lock_downgrade+0x880/0x880 [ 260.999354][T10799] ? kasan_check_read+0x11/0x20 [ 261.004298][T10799] ? do_raw_spin_unlock+0x57/0x270 [ 261.009423][T10799] ? _raw_spin_unlock+0x2d/0x50 [ 261.014278][T10799] ? __alloc_fd+0x430/0x530 [ 261.018817][T10799] do_sys_open+0x3fe/0x5d0 [ 261.023452][T10799] ? filp_open+0x80/0x80 [ 261.027799][T10799] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 261.033274][T10799] ? do_syscall_64+0x26/0x610 [ 261.037964][T10799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.044037][T10799] ? do_syscall_64+0x26/0x610 [ 261.048733][T10799] __x64_sys_open+0x7e/0xc0 [ 261.053246][T10799] do_syscall_64+0x103/0x610 [ 261.057848][T10799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.063843][T10799] RIP: 0033:0x458209 [ 261.067749][T10799] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:18:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @multicast1}, {0x7, @local}, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_0\x00'}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180)='/dev/rtc0\x00', 0x10400, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000011c0)={@multicast2, @multicast1, 0x1, 0x1, [@local]}, 0x14) r4 = socket$inet(0x2, 0x80002, 0x80000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 261.088255][T10799] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 261.096814][T10799] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 261.104790][T10799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 261.112766][T10799] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 261.121190][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 261.129710][T10799] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 [ 261.138178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 261.144988][ C1] protocol 88fb is buggy, dev hsr_slave_0 20:18:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000480)={0x4c42, {{0x2, 0x4e20, @remote}}, 0x0, 0x7, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @broadcast}}]}, 0x410) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000940)={0xa, &(0x7f00000008c0)=[{0xa91c, 0xfffffffffffffffe, 0x200, 0xd0b}, {0xdd8a, 0xfffffffffffffff8, 0xffe, 0xdd8e}, {0x7, 0x9, 0x3}, {0x4, 0x7, 0x0, 0x5}, {0x9, 0xfffffffffffffbff, 0x9, 0x9}, {0x40, 0x7, 0x401, 0xffffffffffff8001}, {0x3, 0xb4, 0x3ff, 0x46547c50}, {0x80, 0xffffffff, 0x9, 0x4}, {0xb61, 0x4a7, 0x0, 0xac}, {0x101, 0xf622, 0x74, 0x2}]}, 0x10) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000280)=[{0x400, 0x5, 0xffffffffffffff59, 0x7f, @time={r3, r4+10000000}, {0x10001, 0x5}, {0x2}, @result={0x100000000, 0x101}}, {0x4, 0x9, 0xfff, 0xbe0, @time={0x77359400}, {0x4, 0x1}, {0x9, 0x80000001}, @note={0x7, 0x4, 0x0, 0x0, 0xe9}}, {0x3, 0x6, 0x7ff, 0x100000001, @time={r5, r6+10000000}, {0xe36, 0x5}, {0x170b, 0x2}, @connect={{0x9, 0x5}, {0x10000, 0x5}}}, {0x400, 0x3ff, 0x9, 0x2, @tick=0xffffffff, {0xfff, 0x20}, {0x3, 0x80000000}, @addr={0x3, 0x8000}}, {0x10000, 0x114ef8b0, 0x8, 0x2, @tick=0x40, {0x8, 0x2}, {0x7, 0x396000000}, @quote={{0x1}, 0xff, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x0, @time={r7, r8+30000000}, {0xfffffffffffffffa, 0x1}, {0x6, 0x4}, @connect={{0xd7, 0x1c00000000000000}, {0xe0, 0xdef5}}}}}, {0x1000, 0x2, 0x6, 0x0, @time={r9, r10+10000000}, {0xffffffffffffff80, 0x4}, {0x101, 0x8}, @addr={0x4}}, {0x9, 0x81, 0x6, 0x40, @time, {0x427, 0x3}, {0x1, 0x2}, @quote={{0x4, 0x8001}, 0x7}}, {0x3, 0x5, 0x5, 0x5eb, @time={0x77359400}, {0x5, 0x3}, {0x3, 0x4}, @quote={{0x8000, 0x9}, 0x800, &(0x7f0000000200)={0x7, 0x7fff, 0x7fffffff, 0x9, @tick=0x7, {0x6, 0x100000001}, {0x2, 0x100000000}, @result={0x3ff, 0x5}}}}, {0x7fff, 0x8, 0x8, 0x30000000, @time, {0xffffffff, 0x50}, {0xfffffffffffffffa, 0x100}, @quote={{0x5c, 0x5}, 0x40, &(0x7f0000000240)={0x2, 0xecf, 0xbb, 0x2, @time, {0x5, 0x5}, {0x9, 0x69c09fa7}, @connect={{0x3, 0xf1b}, {0x9, 0xfffffffffffffff7}}}}}, {0x6, 0x80, 0xf5c, 0x400, @tick=0x100000001, {0x4}, {0x4, 0x6}, @raw8={"e33fbb9ae64a7d2b17397245"}}], 0x1e0) 20:18:31 executing program 3 (fault-call:5 fault-nth:4): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x83) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:31 executing program 5 (fault-call:4 fault-nth:3): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5451, &(0x7f0000000100)={0x0, r1}) 20:18:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) shutdown(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x2dd, 0x2, 0x7d0c, 0xfffffffffffffff8, 0x0, 0x7, 0xb3}, &(0x7f0000000040)={0x5, 0xfffffffffffffffa, 0x228, 0x0, 0x1, 0x7, 0x5, 0x100000000}, &(0x7f0000000080)={0x7, 0x80000000, 0x6, 0x101, 0x10b, 0xe000000000, 0x80000000, 0x7ff}, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f00000001c0)={&(0x7f0000000140)={0xff}, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local, 0x5}], 0x1c) 20:18:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) 20:18:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast2}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:31 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0xfc495b5535edc08a, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2d, 'memory'}]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000014c0)=[{{&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="c3f8402bae798b862cd8a6363f560fc9cdb7b066a2ae9f656c8f54f53c9f87b20516e76cf7f773c3f27bf06ecb2cf1cd18c0f60ed862e8fa21306946cfb005444bdd0913476e92f4928c3db44674f646bb8521584a9e1889b003aaa94fa4a75e7d9c35a7b57e251a61c17860021ec24723be762e6f31c8a5a98c62aec00340c0f96f4f", 0x83}], 0x1, &(0x7f0000000480)=[{0x68, 0x19b, 0x8, "ab9c763123cc40b2ac50e51354a4678bd8c8c1446eaa67e5a6b01b8b9e3548f4bf2633e36195d953a0e417e8f0df40ef388c9606f47f41e451795efc88f7d876417189083dad47c78464f6fb37bdd6a4f1893a73be40"}], 0x68}, 0x4}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="e6110d3e2b3836ac2f854a51c294e09613d1d4254b49faf07122026001614a56076b3482cb7c502bd876f6df01f289e748fb699bac94ff44844639d623210f713b789bc027933268456945933632568f0ea552d8485b9ca9663721e3ab177017cd8f91b343a32fe2ba6a1e2bde3b700053f72e6836178e9e9268cb4527dd726cf11fc530e807f494ba52a13fb291e21887f3ae780f98252ec651d272df95c4bc18e35ffefd14df8822bf372c79128f7dd3996bf4b106400f2adf2ab91aa28e5f4943af2c56ff8e4626323a91016285a0", 0xd0}, {&(0x7f0000000600)="aaf3f52799cba2aaec06483b44f284295ffcf5447abfc435439f958f8ee6a6ce91395bc24f4d76bb324177193b2473d632dfaebae6c74c4310ffe3e2ed1739ba488e3908d9aaba5f40ea72fd809be457980c9d934071968584bc6b4f54d435e61ba694dead9c193318b981a75a3c881624668f08db30c805648db1", 0x7b}], 0x2}, 0x7}, {{&(0x7f00000006c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x4, 0x2, "bb6a5979e385f18338d6db44de1e9fb963bebc2b542e26456ee12d93d469e0b412412056d22186876b6136c06a45008214dfe15567d6340b9cb07cf2dd334f", 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)="2e955c4a6f9f5b55e4b7885dc6efc2580d8563a571a4b601ac086d55f90730d1b768bec8080ca2b52ada8c9c1a3c295bc092c11f3a406e8020be3a7ce3e517eb3b2a5cd7f25e7a0d6ea0338910d7a903f103e5b744dc46946197e2d7e2", 0x5d}, {&(0x7f00000007c0)="a2134a1d1bde688ca8bdc1a2501f2a62350c32eb4b174d82e4b9d0930e7c94e290c65d3e24c8ee5b621292156ad5902598e376fbd565fade324cf1aa4dd38482bae09d36c977fafbc0b1c602b4796d44bca0061cef2321ef7fe97b4afc7b6d2dcd55d8d687e7a9a4bbfbe86339c8652b261a09540f52bc70d8745f1b91023d050fe27b7539d553bf188acb1ba1948d4f78ea535b5d3a7dfece0d55ee47c7ed0aaac2e1c1b98f6b9314be9c9459f7bed2b125c4c580872efae84d82ce84a4612f492d4b948d78994bbcfea9ac078aea4859ab1737d8a032d0", 0xd8}, {&(0x7f00000008c0)="fe7bb001e673a4f1bf1d4e1ff7a2e0f566f5f67494bfd5965189f89e8a374ecaeda4b265094c35b3120e436a8cba93d273d844cce8f1c18ef410100601584a68ada9985b6f54ba3591e7405cc741a9ef1332a30c23c83794ef787f8a3da9d9cec557e2efcb4a0bbaa9db8420e1a67e9002aa31b67199f39be6c5027fd3a57b1106ec2776eedfa1f89f288cb66260156e000668cac201023bf37c1bc55740d52f001dba6fbf67ae312dbb9e5b", 0xac}, {&(0x7f0000000980)="7ac4a943d60c950780bb3988667f3bc97cb0a94f3d5c826f8e2c825c484477b70870121e8dd7adfe7e4c1a3272f08598f673709dd5dd716a888281acdc5c202dbb64fb1878cb0ffe3f8db4e44bbbd143690ae2c8f42f49dbbff6182e08080487185d7a6e8d3436801addfbcfa873760b5ab2b4c753a22a1b1f06f1e54d8242bfac91dc670b738eb0db24b7c545179527e8cb7b09168350af8a9600b2c630dce4e6", 0xa1}, {&(0x7f0000000a40)="f31c0215da70d256c17d867c25d2f8498e474e240f874df28cf9dedc63de9c00e6e0cf30c3ff852218817889557349f2095985e310b6c42d8f2890671e61261689acfa128c43b7760f9b1c31a87d7c9b4a5b885f4060bb6b77286ad2ea9ad6ade007a3deaa0693b67d8de4924cc7982dc690ed323d49333384273101cb31291793f9fd898c7d4fa44bc72df30104eb804c5a2c85d50533c4d72eec6dfc2f3bd5c9fcf77bbf98d43e1cb4d17f494d66381d88ad8b73796208a363469d5f0b9e70186d199c371d30962cd6165a766024677838", 0xd2}, {&(0x7f0000000b40)="d36c6662bd3112a0b4a9729905c7eee0a08d1fdf35cfc58d31353d9754a1da45699c501101153ed4f0566551702e68e66237328342ac89e36133ebb966c0f4d4f7", 0x41}, {&(0x7f0000000bc0)="645e7be21bc96cde4d1ce476997fec7dc348a8c90891020933168242d242f0afd2144bfc2eb715dafa1b13d721c7ca2fe772f914c7fa8286dd6630a47384143e50450b44db2088be12931d4eb8", 0x4d}], 0x7, &(0x7f0000000cc0)=[{0x98, 0x112, 0x72d55eea, "8ab397230c7495f7f84f9f5f848818034cb30629a24308b759a005739af528b50a0606acdd9cf3076cb6424d5c68785221f81c17041c6e19eaaa9530aa29a87a3730d5bc564c43f2913d45b2902e46ac01c888df2dc34d085bdccc9bdda8c9ba7978daa48e1eca887eb13f253775645c06df57e856278610517f4f0b6f5070624c697cff638b"}], 0x98}, 0x1}, {{&(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e00)="83f53aa66f9c7598e3f1a7f997880744fafd167837ce992baaa5aad8d48dfb0bcb587cfe99ed9e88f340a076c94692c4cd6ade3c25afd00c36a3a49cab6b4087fd6417344263a6485bd75c0da8a2340fac62e8deea02a82443953fdd30dbdb9791c0a42ecee24c00862738e02c19a123dd861970a2b612caad9dc834bd982186eaefb645c7cbb2380f552f3c31b4beb94fa313dc2057ce32e5ce7879e085efb9e1f8f47720efd5ca246925185ec54008988f23b608cb0b6caa0c7b9721dd0e", 0xbf}, {&(0x7f0000000ec0)="57c1e61a7b47862ee945a0681e4e7eacd98fc26636b631c759c902f14b527fa58be827d1b8ae38830b8f96bd1651e240250ac648f8160829af3e37292497d6106dd8097c22d7f64adc78865e033e8411266fe3", 0x53}, {&(0x7f0000000f40)="72295b434aa88a1d83ceed6cdd893ec8939007e10b57d0", 0x17}, {&(0x7f0000000f80)="baafe953545e7cc7385f6817aaf040af86a7a903fdecf1ad3c2388292f8930c76ca8364b96bdcb9ea99ffd5874495aa9909ff4c5fcc3381ab707a85fc34d90a5879fb055c0b2312a9bbdf46a6ae62e22613af861c9a6e7fc55a77a66b922bf8231330b40f6c69697dbb9efc8d8ca2ee49a0c2bbfb752bbfdd1c42ce6af92fde9b04d17256370bf4d1f2f1e65721da48b97906d4a1968d4225f9c903ef51360c56c416c7c4b26712fa920757625759a", 0xaf}], 0x4}, 0x4}, {{&(0x7f0000001080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x7f, 0x1, 0x3, {0xa, 0x4e22, 0x3ff, @mcast1, 0x40}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)="568bcf9dcc85a6b772258ab6f290982146df9a6d7a0d8a6f09433c394e98ffc6cedb1ba96f4668c5b80b67", 0x2b}, {&(0x7f0000001140)="bbf1f7e8b37e6a6ddc45ace47aae72984128049c", 0x14}, {&(0x7f0000001180)="21c86e8df0a668e2f38b94a46b8fa60da4218c4eddb3f3d2a16503872f37510c5e87e9c96d00498c980113bbeeb687d6b67397b288529df2a4845c24d7842c16c3850ed3e4fae8fbdb02a0077e4052a2187f306326e998f82e4b48c0884ffc3a477f15c6059d571c34b1c5df02170b", 0x6f}, {&(0x7f0000001200)="b45b7ca06bdad533307519ae9fbfc19b3afe955cf153e18145b2710944ced6", 0x1f}], 0x4, &(0x7f0000001280)=[{0x48, 0x107, 0x8, "9362d16fc771183c0605a8932dd369ce161e08d9d3a10ec111ac4e910151dc13a33d5dd654a3df0b51a2259a76a80b7428b4ad"}, {0x60, 0x19f, 0x586, "66e98dcf29eb65b12b164750e4e79001b205559b1af4366dc5a4d951e336c356a30ab5e3eab221203d34deff52ac55843770c4fee3644cff3e60bc8e75e1ad5a7b2b31097cae7770e7d7b407"}], 0xa8}, 0x2}], 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x8, 0x200000) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000002c0)=0x9, 0x4) [ 261.682485][T10850] syz-executor.1 (10850) used greatest stack depth: 21800 bytes left 20:18:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000580)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="66b93c09000066b81ee0000066ba000000000f3026993edb16e8000fc76f0066b9800000c00f326635001000000f30260f21ae66b80c0000000f23c80f21f866350c0030000f23f80fc79a040067660f380843f9baa00066b83bfd0daf66ef", 0x5f}], 0x1, 0x0, &(0x7f0000000240)=[@cstype3={0x5, 0x5}, @dstype0={0x6, 0x2}], 0x2) r4 = socket$inet(0x2, 0x80000, 0x88) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={r6, @in={{0x2, 0x4e21, @multicast1}}, 0x1, 0x4000000000000}, &(0x7f0000000500)=0x90) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000000c0)={0x6, 0x8, 0x4}) fdatasync(r0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) shmget(0x2, 0x2000, 0x408, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0xffffffffffffffff, 0x4000, 0x280, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000640)=""/215) shmget(0x3, 0x1000, 0x13, &(0x7f0000ffd000/0x1000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2e0000000600000000000000000000000000808e4f6233adf09267052242f40000"], 0x21) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x137}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000200)={0x200, 0x1, {0x1, 0x0, 0x8001, 0x3, 0x20}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) close(r6) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2000000000, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) [ 261.883903][T10852] FAULT_INJECTION: forcing a failure. [ 261.883903][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 261.905821][T10852] CPU: 1 PID: 10852 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 261.914149][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.924238][T10852] Call Trace: [ 261.927667][T10852] dump_stack+0x172/0x1f0 [ 261.932053][T10852] should_fail.cold+0xa/0x15 [ 261.936774][T10852] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 261.942896][T10852] ? ___might_sleep+0x163/0x280 [ 261.948041][T10852] __should_failslab+0x121/0x190 [ 261.953976][T10852] should_failslab+0x9/0x14 [ 261.959674][T10852] kmem_cache_alloc+0x2b2/0x6f0 [ 261.959707][T10852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.959747][T10852] integrity_inode_get+0x4e/0x260 [ 261.976328][T10852] process_measurement+0x2c7/0x1570 [ 261.981580][T10852] ? __lock_acquire+0x548/0x3fb0 [ 261.986548][T10852] ? ima_add_template_entry.cold+0x48/0x48 [ 261.992382][T10852] ? aa_get_task_label+0x3a6/0x720 [ 261.997518][T10852] ? find_held_lock+0x35/0x130 [ 262.002309][T10852] ? aa_get_task_label+0x3a6/0x720 [ 262.007462][T10852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.013727][T10852] ? refcount_sub_and_test_checked+0x154/0x200 [ 262.019906][T10852] ? refcount_dec_not_one+0x1f0/0x1f0 [ 262.025299][T10852] ? refcount_dec_and_test_checked+0x1b/0x20 [ 262.031293][T10852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 262.037549][T10852] ? apparmor_task_getsecid+0x94/0xd0 [ 262.037570][T10852] ima_file_check+0xc5/0x110 [ 262.037587][T10852] ? process_measurement+0x1570/0x1570 [ 262.037599][T10852] ? inode_permission+0xb4/0x570 [ 262.037619][T10852] path_openat+0x1142/0x46e0 [ 262.037634][T10852] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 262.037647][T10852] ? kasan_slab_alloc+0xf/0x20 [ 262.037660][T10852] ? kmem_cache_alloc+0x11a/0x6f0 [ 262.037672][T10852] ? getname_flags+0xd6/0x5b0 [ 262.037691][T10852] ? getname+0x1a/0x20 [ 262.058343][T10852] ? do_sys_open+0x2c9/0x5d0 [ 262.058372][T10852] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 262.058396][T10852] ? __alloc_fd+0x430/0x530 [ 262.102273][T10852] do_filp_open+0x1a1/0x280 [ 262.106801][T10852] ? may_open_dev+0x100/0x100 [ 262.111518][T10852] ? kasan_check_read+0x11/0x20 [ 262.116491][T10852] ? do_raw_spin_unlock+0x57/0x270 [ 262.121621][T10852] ? _raw_spin_unlock+0x2d/0x50 [ 262.126495][T10852] ? __alloc_fd+0x430/0x530 [ 262.131041][T10852] do_sys_open+0x3fe/0x5d0 [ 262.135484][T10852] ? filp_open+0x80/0x80 [ 262.139750][T10852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.145226][T10852] ? do_syscall_64+0x26/0x610 [ 262.149923][T10852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.156026][T10852] ? do_syscall_64+0x26/0x610 [ 262.160780][T10852] __x64_sys_open+0x7e/0xc0 [ 262.165303][T10852] do_syscall_64+0x103/0x610 [ 262.169916][T10852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.175828][T10852] RIP: 0033:0x458209 [ 262.179729][T10852] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.199693][T10852] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 262.208127][T10852] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 262.216118][T10852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 262.224107][T10852] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 20:18:32 executing program 3 (fault-call:5 fault-nth:5): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5452, &(0x7f0000000100)={0x0, r1}) 20:18:32 executing program 4: r0 = socket$unix(0x1, 0x400002, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x101) r3 = socket(0x2, 0x80000, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xbb, @loopback, 0x7}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0001050000000100050007000610"], &(0x7f0000000280)=0x12) bind$unix(r0, &(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) close(r1) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000000)="f0", 0x1}], 0x1) 20:18:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x8080f, 0x101) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000000c0)={0x4}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="f1e20c172ef4d9b401132f59480eb407c73fa3a01ac34a0024052903eab1ad633980d08b19b6b91efd061daedba2216b0196c899821143bdffb2c021869bb2d9a75c16d83546403042914219ba7ab49001c6bccc127da520b362610a7e47f58b272b1f55ae0c90ba4f9213b646d643849cfa9c2f297b6dac8ff4370cfeec17171acd942258552781177d3f8fd04f9f20788b3b7f69f85a4f604c8795", 0x9c) [ 262.232274][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 262.240382][T10852] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 20:18:32 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) connect(r0, &(0x7f0000000280)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x80) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x9, 0x4001) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x5}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0xfffffffffffffffc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e21, 0x10000000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2a}, {0xa, 0x4e21, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x29}, 0x8}, 0x1, [0x6, 0x5, 0xcdb, 0x9, 0x485a3730, 0x9, 0x1, 0x5]}, 0x5c) 20:18:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0xfffffffffffffe3e) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5460, &(0x7f0000000100)={0x0, r1}) 20:18:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0ae307123c123f3188b070") r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x80000) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000140)="99a72ee5a1e540f302ea363789421a700e46f86182574026edb79e5e6f89c7e72710690721677de884fa05df7714a4fb520f7e25779bbafaea29b81194a3beb9361ed3a06f77b32217cc146968f45ef0", 0x50) r2 = socket$inet(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 20:18:32 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1004, 0x0, 0x11, r0, 0x0) 20:18:32 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0xfc495b5535edc08a, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2d, 'memory'}]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f00000014c0)=[{{&(0x7f0000000300)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="c3f8402bae798b862cd8a6363f560fc9cdb7b066a2ae9f656c8f54f53c9f87b20516e76cf7f773c3f27bf06ecb2cf1cd18c0f60ed862e8fa21306946cfb005444bdd0913476e92f4928c3db44674f646bb8521584a9e1889b003aaa94fa4a75e7d9c35a7b57e251a61c17860021ec24723be762e6f31c8a5a98c62aec00340c0f96f4f", 0x83}], 0x1, &(0x7f0000000480)=[{0x68, 0x19b, 0x8, "ab9c763123cc40b2ac50e51354a4678bd8c8c1446eaa67e5a6b01b8b9e3548f4bf2633e36195d953a0e417e8f0df40ef388c9606f47f41e451795efc88f7d876417189083dad47c78464f6fb37bdd6a4f1893a73be40"}], 0x68}, 0x4}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="e6110d3e2b3836ac2f854a51c294e09613d1d4254b49faf07122026001614a56076b3482cb7c502bd876f6df01f289e748fb699bac94ff44844639d623210f713b789bc027933268456945933632568f0ea552d8485b9ca9663721e3ab177017cd8f91b343a32fe2ba6a1e2bde3b700053f72e6836178e9e9268cb4527dd726cf11fc530e807f494ba52a13fb291e21887f3ae780f98252ec651d272df95c4bc18e35ffefd14df8822bf372c79128f7dd3996bf4b106400f2adf2ab91aa28e5f4943af2c56ff8e4626323a91016285a0", 0xd0}, {&(0x7f0000000600)="aaf3f52799cba2aaec06483b44f284295ffcf5447abfc435439f958f8ee6a6ce91395bc24f4d76bb324177193b2473d632dfaebae6c74c4310ffe3e2ed1739ba488e3908d9aaba5f40ea72fd809be457980c9d934071968584bc6b4f54d435e61ba694dead9c193318b981a75a3c881624668f08db30c805648db1", 0x7b}], 0x2}, 0x7}, {{&(0x7f00000006c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x4, 0x2, "bb6a5979e385f18338d6db44de1e9fb963bebc2b542e26456ee12d93d469e0b412412056d22186876b6136c06a45008214dfe15567d6340b9cb07cf2dd334f", 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)="2e955c4a6f9f5b55e4b7885dc6efc2580d8563a571a4b601ac086d55f90730d1b768bec8080ca2b52ada8c9c1a3c295bc092c11f3a406e8020be3a7ce3e517eb3b2a5cd7f25e7a0d6ea0338910d7a903f103e5b744dc46946197e2d7e2", 0x5d}, {&(0x7f00000007c0)="a2134a1d1bde688ca8bdc1a2501f2a62350c32eb4b174d82e4b9d0930e7c94e290c65d3e24c8ee5b621292156ad5902598e376fbd565fade324cf1aa4dd38482bae09d36c977fafbc0b1c602b4796d44bca0061cef2321ef7fe97b4afc7b6d2dcd55d8d687e7a9a4bbfbe86339c8652b261a09540f52bc70d8745f1b91023d050fe27b7539d553bf188acb1ba1948d4f78ea535b5d3a7dfece0d55ee47c7ed0aaac2e1c1b98f6b9314be9c9459f7bed2b125c4c580872efae84d82ce84a4612f492d4b948d78994bbcfea9ac078aea4859ab1737d8a032d0", 0xd8}, {&(0x7f00000008c0)="fe7bb001e673a4f1bf1d4e1ff7a2e0f566f5f67494bfd5965189f89e8a374ecaeda4b265094c35b3120e436a8cba93d273d844cce8f1c18ef410100601584a68ada9985b6f54ba3591e7405cc741a9ef1332a30c23c83794ef787f8a3da9d9cec557e2efcb4a0bbaa9db8420e1a67e9002aa31b67199f39be6c5027fd3a57b1106ec2776eedfa1f89f288cb66260156e000668cac201023bf37c1bc55740d52f001dba6fbf67ae312dbb9e5b", 0xac}, {&(0x7f0000000980)="7ac4a943d60c950780bb3988667f3bc97cb0a94f3d5c826f8e2c825c484477b70870121e8dd7adfe7e4c1a3272f08598f673709dd5dd716a888281acdc5c202dbb64fb1878cb0ffe3f8db4e44bbbd143690ae2c8f42f49dbbff6182e08080487185d7a6e8d3436801addfbcfa873760b5ab2b4c753a22a1b1f06f1e54d8242bfac91dc670b738eb0db24b7c545179527e8cb7b09168350af8a9600b2c630dce4e6", 0xa1}, {&(0x7f0000000a40)="f31c0215da70d256c17d867c25d2f8498e474e240f874df28cf9dedc63de9c00e6e0cf30c3ff852218817889557349f2095985e310b6c42d8f2890671e61261689acfa128c43b7760f9b1c31a87d7c9b4a5b885f4060bb6b77286ad2ea9ad6ade007a3deaa0693b67d8de4924cc7982dc690ed323d49333384273101cb31291793f9fd898c7d4fa44bc72df30104eb804c5a2c85d50533c4d72eec6dfc2f3bd5c9fcf77bbf98d43e1cb4d17f494d66381d88ad8b73796208a363469d5f0b9e70186d199c371d30962cd6165a766024677838", 0xd2}, {&(0x7f0000000b40)="d36c6662bd3112a0b4a9729905c7eee0a08d1fdf35cfc58d31353d9754a1da45699c501101153ed4f0566551702e68e66237328342ac89e36133ebb966c0f4d4f7", 0x41}, {&(0x7f0000000bc0)="645e7be21bc96cde4d1ce476997fec7dc348a8c90891020933168242d242f0afd2144bfc2eb715dafa1b13d721c7ca2fe772f914c7fa8286dd6630a47384143e50450b44db2088be12931d4eb8", 0x4d}], 0x7, &(0x7f0000000cc0)=[{0x98, 0x112, 0x72d55eea, "8ab397230c7495f7f84f9f5f848818034cb30629a24308b759a005739af528b50a0606acdd9cf3076cb6424d5c68785221f81c17041c6e19eaaa9530aa29a87a3730d5bc564c43f2913d45b2902e46ac01c888df2dc34d085bdccc9bdda8c9ba7978daa48e1eca887eb13f253775645c06df57e856278610517f4f0b6f5070624c697cff638b"}], 0x98}, 0x1}, {{&(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e00)="83f53aa66f9c7598e3f1a7f997880744fafd167837ce992baaa5aad8d48dfb0bcb587cfe99ed9e88f340a076c94692c4cd6ade3c25afd00c36a3a49cab6b4087fd6417344263a6485bd75c0da8a2340fac62e8deea02a82443953fdd30dbdb9791c0a42ecee24c00862738e02c19a123dd861970a2b612caad9dc834bd982186eaefb645c7cbb2380f552f3c31b4beb94fa313dc2057ce32e5ce7879e085efb9e1f8f47720efd5ca246925185ec54008988f23b608cb0b6caa0c7b9721dd0e", 0xbf}, {&(0x7f0000000ec0)="57c1e61a7b47862ee945a0681e4e7eacd98fc26636b631c759c902f14b527fa58be827d1b8ae38830b8f96bd1651e240250ac648f8160829af3e37292497d6106dd8097c22d7f64adc78865e033e8411266fe3", 0x53}, {&(0x7f0000000f40)="72295b434aa88a1d83ceed6cdd893ec8939007e10b57d0", 0x17}, {&(0x7f0000000f80)="baafe953545e7cc7385f6817aaf040af86a7a903fdecf1ad3c2388292f8930c76ca8364b96bdcb9ea99ffd5874495aa9909ff4c5fcc3381ab707a85fc34d90a5879fb055c0b2312a9bbdf46a6ae62e22613af861c9a6e7fc55a77a66b922bf8231330b40f6c69697dbb9efc8d8ca2ee49a0c2bbfb752bbfdd1c42ce6af92fde9b04d17256370bf4d1f2f1e65721da48b97906d4a1968d4225f9c903ef51360c56c416c7c4b26712fa920757625759a", 0xaf}], 0x4}, 0x4}, {{&(0x7f0000001080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x7f, 0x1, 0x3, {0xa, 0x4e22, 0x3ff, @mcast1, 0x40}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)="568bcf9dcc85a6b772258ab6f290982146df9a6d7a0d8a6f09433c394e98ffc6cedb1ba96f4668c5b80b67", 0x2b}, {&(0x7f0000001140)="bbf1f7e8b37e6a6ddc45ace47aae72984128049c", 0x14}, {&(0x7f0000001180)="21c86e8df0a668e2f38b94a46b8fa60da4218c4eddb3f3d2a16503872f37510c5e87e9c96d00498c980113bbeeb687d6b67397b288529df2a4845c24d7842c16c3850ed3e4fae8fbdb02a0077e4052a2187f306326e998f82e4b48c0884ffc3a477f15c6059d571c34b1c5df02170b", 0x6f}, {&(0x7f0000001200)="b45b7ca06bdad533307519ae9fbfc19b3afe955cf153e18145b2710944ced6", 0x1f}], 0x4, &(0x7f0000001280)=[{0x48, 0x107, 0x8, "9362d16fc771183c0605a8932dd369ce161e08d9d3a10ec111ac4e910151dc13a33d5dd654a3df0b51a2259a76a80b7428b4ad"}, {0x60, 0x19f, 0x586, "66e98dcf29eb65b12b164750e4e79001b205559b1af4366dc5a4d951e336c356a30ab5e3eab221203d34deff52ac55843770c4fee3644cff3e60bc8e75e1ad5a7b2b31097cae7770e7d7b407"}], 0xa8}, 0x2}], 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x8, 0x200000) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000002c0)=0x9, 0x4) 20:18:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0xa, &(0x7f00000000c0)="eb1e1f123c123f3188b070d7349975a019f78be0ae3f40004e0b8a2ab495ee4a66f26b8cce2f0acf6fda72fd8eff4ce5ca6348f98253b8fc46435f9ff3da28940010000000000000e9e8078663740426b2ff57c994241ceece5c5ac3d4600a0cdb8dc8027745f7c904c23b6fede8c9b60b26cb3282f2f175b9e0c5c7d121daade877bd121df178f921c6e01f1c901bdacaba5e7061d515706ddf3134145af855e457903d4522a85be8d2666babaaa0283f6eeb59e475e454e6ec810ec4970000000000000000") r1 = socket$inet(0x2, 0x80001, 0x84) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/107, 0x6b}, {&(0x7f0000001240)=""/64, 0x40}], 0x3, &(0x7f00000012c0)=""/160, 0xa0}, 0x7f}], 0x1, 0x41, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000013c0)=0x20000000000000, 0xa038989f) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 263.034681][T10929] FAULT_INJECTION: forcing a failure. [ 263.034681][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 263.053763][T10929] CPU: 1 PID: 10929 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #31 [ 263.061802][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.072053][T10929] Call Trace: [ 263.075426][T10929] dump_stack+0x172/0x1f0 [ 263.079901][T10929] should_fail.cold+0xa/0x15 [ 263.085146][T10929] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 263.091883][T10929] ? ___might_sleep+0x163/0x280 [ 263.096777][T10929] __should_failslab+0x121/0x190 [ 263.101937][T10929] should_failslab+0x9/0x14 [ 263.106474][T10929] kmem_cache_alloc+0x2b2/0x6f0 [ 263.111358][T10929] ima_d_path+0x52/0x1ee [ 263.115630][T10929] ? integrity_inode_get+0x2a/0x260 [ 263.120946][T10929] process_measurement+0xb17/0x1570 [ 263.126358][T10929] ? ima_add_template_entry.cold+0x48/0x48 [ 263.132234][T10929] ? aa_get_task_label+0x3a6/0x720 [ 263.137395][T10929] ? find_held_lock+0x35/0x130 [ 263.142192][T10929] ? aa_get_task_label+0x3a6/0x720 [ 263.147368][T10929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.153646][T10929] ? refcount_sub_and_test_checked+0x154/0x200 [ 263.159863][T10929] ? refcount_dec_not_one+0x1f0/0x1f0 [ 263.165277][T10929] ? refcount_dec_and_test_checked+0x1b/0x20 [ 263.171293][T10929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 263.177659][T10929] ? apparmor_task_getsecid+0x94/0xd0 [ 263.183055][T10929] ima_file_check+0xc5/0x110 [ 263.187665][T10929] ? process_measurement+0x1570/0x1570 [ 263.193149][T10929] ? inode_permission+0xb4/0x570 [ 263.198206][T10929] path_openat+0x1142/0x46e0 [ 263.202822][T10929] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 263.208655][T10929] ? kasan_slab_alloc+0xf/0x20 [ 263.213461][T10929] ? kmem_cache_alloc+0x11a/0x6f0 [ 263.218507][T10929] ? getname_flags+0xd6/0x5b0 [ 263.223207][T10929] ? getname+0x1a/0x20 [ 263.227294][T10929] ? do_sys_open+0x2c9/0x5d0 [ 263.231896][T10929] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 263.237279][T10929] ? __alloc_fd+0x430/0x530 [ 263.241799][T10929] do_filp_open+0x1a1/0x280 [ 263.246426][T10929] ? may_open_dev+0x100/0x100 [ 263.251114][T10929] ? kasan_check_read+0x11/0x20 [ 263.256127][T10929] ? do_raw_spin_unlock+0x57/0x270 [ 263.261242][T10929] ? _raw_spin_unlock+0x2d/0x50 [ 263.266102][T10929] ? __alloc_fd+0x430/0x530 [ 263.270620][T10929] do_sys_open+0x3fe/0x5d0 [ 263.275052][T10929] ? filp_open+0x80/0x80 [ 263.279316][T10929] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.284778][T10929] ? do_syscall_64+0x26/0x610 [ 263.290210][T10929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.296273][T10929] ? do_syscall_64+0x26/0x610 [ 263.300963][T10929] __x64_sys_open+0x7e/0xc0 [ 263.305514][T10929] do_syscall_64+0x103/0x610 [ 263.310104][T10929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.316003][T10929] RIP: 0033:0x458209 [ 263.319898][T10929] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.340022][T10929] RSP: 002b:00007f8ebdd4fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 263.348627][T10929] RAX: ffffffffffffffda RBX: 00007f8ebdd4fc90 RCX: 0000000000458209 [ 263.357416][T10929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000780 [ 263.365497][T10929] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 263.373962][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ebdd506d4 [ 263.381955][T10929] R13: 00000000004f517f R14: 00000000004d74f8 R15: 0000000000000004 [ 263.393181][ T26] audit: type=1804 audit(1553199513.335:54): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="ramfs" ino=40662 res=1 20:18:33 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:18:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, &(0x7f0000000100)={0x0, r1}) 20:18:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1010, 0x0, 0x11, r0, 0x0) 20:18:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:33 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x4, 0x94, 0x0, 0x9}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40000, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000003c0)) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="ff0700008100de741be936e3811ba9bc4a04d718f82b49bd1d725c092fa7554e6f8f0064fafa35146f5b3993ef6b4d097d526b62768b8283368092e905e3147baade94d30655df6b04c409eaf80b9cfea979958d24a36d3cd240503c8843ad6b3c3e62b61b726e948866549cfcbb84f19e8b7db50c9e6395d84e6f15e083665420d3537f7f19488a91fb7e10f5796f9c91e48e8eff756bd50d5d5f21fd8aff72fecbe2a42b10384edea245cff99efc96ed538033a490b877f01a49e599520000"]) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180)) bind$packet(r0, &(0x7f0000000280)={0x11, 0xff, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 20:18:33 executing program 1: userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0xffffffff80000001) [ 263.430205][ T26] audit: type=1800 audit(1553199513.365:55): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=40662 res=0 20:18:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000140)="adcf8db348d9efc17a2f9f3a718593ab2170d78db17698d284852303b62dba0e0fa5ab8b26066281da0ae40d0a5e009130bf0a20493c66fde97c5d7798c11ec10ace4b1ef963", 0x46, 0x0, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17, 0x80) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) 20:18:33 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x4, 0x94, 0x0, 0x9}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40000, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000003c0)) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="ff0700008100de741be936e3811ba9bc4a04d718f82b49bd1d725c092fa7554e6f8f0064fafa35146f5b3993ef6b4d097d526b62768b8283368092e905e3147baade94d30655df6b04c409eaf80b9cfea979958d24a36d3cd240503c8843ad6b3c3e62b61b726e948866549cfcbb84f19e8b7db50c9e6395d84e6f15e083665420d3537f7f19488a91fb7e10f5796f9c91e48e8eff756bd50d5d5f21fd8aff72fecbe2a42b10384edea245cff99efc96ed538033a490b877f01a49e599520000"]) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180)) bind$packet(r0, &(0x7f0000000280)={0x11, 0xff, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 20:18:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x201bf000, 0x0, 0x11, r0, 0x0) 20:18:33 executing program 1: userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0xffffffff80000001) 20:18:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000000100)={0x0, r1}) 20:18:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") time(&(0x7f00000001c0)) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x9, 0x9, 0x5, 0x5, 0x6, 0x0, 0x45, 0xc1, 0x4d9d, 0x77f2}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 263.992759][ T26] audit: type=1804 audit(1553199513.935:56): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/122/file0/bus" dev="ramfs" ino=41048 res=1 20:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x8b, 0x0, 0xa00, 0xfffffffffffffffc]}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @dev={[], 0x29}}, 0x10) 20:18:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000100)={0x0, 0x3, 0xe, [], &(0x7f0000000040)=0x129a}) r1 = semget$private(0x0, 0x4, 0x8) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/28) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x337, &(0x7f0000000080)}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x2}, 0x4) 20:18:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000340)={0x80, 0x8004, 0x3, 0x1, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r3, 0x8000}, &(0x7f0000000400)=0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x54, "7a492aa78f67d70159e3899b0bc08d5393c7c0b20d7d999c1e0e20d66498ab55164fdd53f08823780bf72025968a8d093f2df6a073f15f11f18e6e19b18618ee08d9c6d1d4e9d046ceee7af9751647156fe9efda"}, &(0x7f0000000140)=0x5c) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e22, 0x1, @remote, 0x7ff}}}, 0x84) 20:18:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40049409, &(0x7f0000000100)={0x0, r1}) 20:18:34 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x7fffdfe40000, 0x0, 0x11, r0, 0x0) 20:18:34 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x2, 0x0) 20:18:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x5, 0x10, &(0x7f00000000c0)="a0877ae37d7e372ce42ac767600241a722b523e1e3c8868016", &(0x7f0000000100)="31277104c2e84dc2b5ad0ec9189bb4332701d40ecdf6fd5495cc031ba0177b9a6b49be478a3b740aec0e591f2137055df0f2c0319cc85e073fab6c76bb02c69467586020a0c8ef7c26c443a717104dd3911af1558d9171309a7493e9a599bfce624525d01e146f2380b08b8169fb27312e9672a336bf7097c40e8479f1e447", 0x19, 0x7f}) 20:18:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x40000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x320, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x349a52d5, 0x10000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) munlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/52, 0x34) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'\x00', 0x1}) r3 = syz_open_pts(r0, 0xfffffffffffffffd) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) ioctl$FIONREAD(r3, 0x5441, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0) 20:18:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000140)=""/237) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x1) r3 = dup3(r0, r0, 0x80000) flistxattr(r1, &(0x7f0000000280)=""/4096, 0x1000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x4, 0x20, 0x1, r3}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") open(&(0x7f0000000100)='./file0\x00', 0x800, 0xa3) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:34 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x11, r0, 0x0) 20:18:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af00, &(0x7f0000000100)={0x0, r1}) 20:18:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f0000000340)='./file0\x00') ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x7, 0x0, [], {0x0, @reserved}}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00\xd2\x9di\xad\x0f\xb6\xb94\xc1CG\xb4N\xbf9\xe4\x85*\x16\xe8Z\xaf\xf3\r\xf1\xd1\xd6*U') 20:18:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='U', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 20:18:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:34 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 20:18:34 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) dup2(r0, r1) 20:18:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='batadv0\x00') sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x304}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 20:18:34 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x3, 0x0) 20:18:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0xa00, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4850) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/96) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:18:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af25, &(0x7f0000000100)={0x0, r1}) 20:18:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 20:18:34 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x10, 0x11, r0, 0x0) 20:18:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="a4cc2592538a45dd88b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 265.034765][T11170] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:18:35 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0xffffff88, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff81, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x53, r0, 0x80000000) 20:18:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) epoll_create1(0x80000) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x3f, 0x2, 'client0\x00', 0xffffffff80000001, "7c879cd090214fd9", "375145c9cf3ab887edad60e72cd483d5347f8775f35bca257bc7b941257d7778", 0x9, 0x687a}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) 20:18:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4020940d, &(0x7f0000000100)={0x0, r1}) 20:18:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)="489b994f74873204806007e384abe5b97556cf3f2e30ce169e924d062b821bfd36468a5c597e42a6382579b482dce4ab8a135549dcf4cadd3ef6c2276b99fe1bab7300542729c583ba604b3e3979d4b8d8c298d3215d0343f3b0f7faa6467ae89c1899201326d2fdb6609d9b7aa3122ba1d562234964d823998823e4656f876d7c3c2dd81f05d1ca3ab5b5986287865dce5e175e1fe0165f8ac8bdd7021bfa3c0f1a8a6c2838ea61a15602f25b2daefe0f2d231ca141ba7d8887b84216b598d4e42d0706212327088ffa536fcd08", 0xce, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x02\x00', 0x4}, 0x68) [ 265.404937][ C1] net_ratelimit: 6 callbacks suppressed [ 265.404946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 265.416666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 265.481638][ T26] audit: type=1804 audit(1553199515.425:57): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/124/file0/bus" dev="ramfs" ino=41377 res=1 20:18:35 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x4, 0x0) 20:18:35 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x3f00, 0x11, r0, 0x0) 20:18:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123204000088b070d084b0ac8a8abf2920416e2a18d451b38db69786f89bc59e361c64bd6c45601774218ef5f134e52d5400e94d003c81032b6c457a16f3b27005075e74b3b16c2eab7d0fd68dcc14602258c1c401e7551bfe961c09e94adb2c3253be54d053e47751c879fbd475331562") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0xffffffffffffff12) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x10000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x0, 0x11, 0x3], [0xc1]}) 20:18:35 executing program 4: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) tgkill(r0, r1, 0x17) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/tcp\x00') setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000940)={0x6}, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) accept4$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x52, 0x80000) r4 = getpgrp(0x0) write$P9_RREADLINK(r3, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r5 = gettid() ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001, 0x8, 0x0, 0x17, 0x13, 0x10, "d5c6f096ee8e1a095e6355b69e85a5d30f76c3a2f68d310dc2178858c4ea0ad046cc40c0123c1745578a7de365fa3fdc74a7541007a9e2b794d8322b1be4b74c", "5b9227a5abb0188e7280caa0a7423d8888a29d0af4e874a9c2ab57bbcfa4742b4bbd1b249e7e1d2073ed27e56ee5c2c872ff502d84be5f0b9cac86a32b1e82a9", "63c871b4f416c7906ce44d7cb15cdf387bd66a8874c1df0c66bf78f78da5b789", [0x2, 0x752]}) r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x402000) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000040), 0x4) rt_sigprocmask(0x0, &(0x7f0000000100)={0xffffffffffffff7c}, 0x0, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r7, 0x2}}, 0x18) rt_tgsigqueueinfo(r4, r5, 0x0, 0x0) 20:18:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f0000000100)={0x0, r1}) 20:18:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net\x00') bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x101480) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x8400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) signalfd(r0, &(0x7f00000002c0)={0x20}, 0x8) r5 = dup2(r3, r4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x2, 0x9}) [ 265.746150][T11226] kvm [11224]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 20:18:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x801) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x31, 0x4, 0x1, "6df096fecdc1bab075f084d90af84338", "f4e6483b2d2b6d74a93c0b8ff38ee7947064ab2844cec40b3e0af265"}, 0x31, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="d93c28dd56be15b7628eee376c4b279a845e25d3a734580ba7b5d94ab929", &(0x7f00000001c0)="79504ae51f0c9ab2d57794624729b1bbeebf92e4a4ea896c16c11230886a40f581b18cc4248e0cac1c0b5d779f4f0ab626e28c2a46b7dfda627f01514dbc374881a20fb7f3536372389df117bea49f94f8455d8db29a80df543ccee69983fabefcf18ef72baa6978827a73c32f567a4d16b1ec88c8f52d06af660d117b9465191f160e09aeda2f6d39d5e4b2523f6369e0f00069159ae07d1adbff1b79dd40f141de0729c4d2f641", 0x1}, 0x20) [ 265.787533][T11238] kvm [11224]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 265.808859][T11242] mmap: syz-executor.4 (11242) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:18:35 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x4000, 0x11, r0, 0x0) 20:18:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000100)={0x0, r1}) 20:18:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad976123c123f3100b07023ddef533f7e8d77d49e1e6626ecc9aa7b83958d9698930ad54d37e7e0a5c926660626aeb971518f2ccfce7b0b132cbaa9bbe7a463325687b97414a9b10e92af30e6e687cd401072b7d0d98c0af737a0e13f73c4501c1598788952c4bdd244913204b1fe27d3426d96c46bfcf0fc7bb1f809a408e282a82a7a187b1fa14864c9b539b387a587ec336c0ad354df354898f518554c64700b81eda30969b5633ba7a1179b3a88047730310bab87286f47d51e267582bc60465e19b6e5") listen(r0, 0x0) r1 = socket$inet(0x2, 0x80f, 0x9) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:35 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, 0x0, &(0x7f000033bffc)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x7f}, 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) [ 266.287669][ T26] audit: type=1804 audit(1553199516.235:58): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/125/file0/bus" dev="ramfs" ino=41481 res=1 20:18:36 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x5, 0x0) 20:18:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80105, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2110, r1, 0x0) userfaultfd(0x800) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x2, 0x0}, 0x0) 20:18:36 executing program 1: syz_emit_ethernet(0x33f, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b4090000303a0080000000000000000000ffffe0000002ff020000004900000000000000000000016d0090780009040060b680fa0000000000004000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 20:18:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x400000, 0x11, r0, 0x0) 20:18:36 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net\x00') bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x101480) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x8400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) signalfd(r0, &(0x7f00000002c0)={0x20}, 0x8) r5 = dup2(r3, r4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2, 0x2, 0x9}) 20:18:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000000100)={0x0, r1}) 20:18:36 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x200000, 0x0) [ 266.536254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 266.543106][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:36 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x800000, 0x11, r0, 0x0) 20:18:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000200)={0x5, 0x80000001, 0x8001, 0x7, 0x8}) timerfd_settime(r1, 0x1, &(0x7f0000000180)={{r2, r3+10000000}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000000100)={0x0, r1}) 20:18:36 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x6, 0x0) 20:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x9, 0x3}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:36 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x10000) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:36 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) 20:18:37 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200104, 0x0) accept4$tipc(r1, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10, 0x80800) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', 'trusted\x00'}, &(0x7f0000000300)=""/152, 0x98) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000240)={0x7, 0x5, 0x54485f24, 0x100000000, 0x1d, 0x81}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0189436, &(0x7f0000000100)={0x0, r1}) 20:18:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x4000000, 0x11, r0, 0x0) 20:18:37 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x100000001, @ipv4={[], [], @local}, 0x1}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x8a1a, @mcast1}], 0x48) r2 = socket(0x1a, 0x3, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xffffffff, 0x1, 0x0, {}, 0x1, 0x7}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/250, 0x5391}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x4e24, 0x5, @empty, 0x4}}}, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x1a, "c9af398c30c99a31bec1f5f8895f95a42affbb37fbbb38159ca3"}, &(0x7f00000001c0)=0x22) 20:18:37 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 20:18:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0xfffffffffffffe74) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 267.324947][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:18:37 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x7, 0x0) 20:18:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc020660b, &(0x7f0000000100)={0x0, r1}) 20:18:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x682000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl(r2, 0x7, &(0x7f0000000200)="86596b407340e29befbb984fc7965b6bfe3ef089425cd62eca04e94c98f93d79f46bff622920472ef933c5604fe4c840fa5ad28412ac7bce0156b68b8bff5a3aaca410de1581f11100e9083dedd2387a2d320506cf09ee3f91f3a35d3702b8cfd0d9567157476730e783e7a02fbadc66e6ef6de7f49eaef7c58d4762dd411c16037801d3b399a4c93c795006c27f680b04a7969fc1c3ba93d1f30701f4a22268cf7c68ee8eaa4aadf257ce975758593ecd50111df9d12bd4044cca4df9e2e1d6f16334dcdbe14c3e1ffbec5d1339") lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@v1={0x2, "9878cdb3fef13811e57ddcf16f7c"}, 0xf, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200200, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000380)={0x0, 0xff, 0x0, 0xffff, 0xb7ec}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r4, 0x29, "81d2625406d89fcd7733f3e2e759235beeb39ca21609623abe03ecef130512a622a4c60cdb13acb60b"}, &(0x7f0000000440)=0x31) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:37 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 20:18:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200200) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0xffc00000}) 20:18:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x10000000, 0x11, r0, 0x0) 20:18:37 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r1 = creat(&(0x7f0000000580)='./file0\x00', 0x20) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000006c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000100220200, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000500)) r3 = getpgrp(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0x50, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r1, 0x0, 0xa, &(0x7f0000000140)='highspeed\x00', r4}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000740)=0xffffff6c) socket$inet6(0xa, 0x3, 0x7) write$nbd(r2, &(0x7f00000005c0)={0x67446698, 0x0, 0x0, 0x3, 0x0, "5c83ff38b0086dc2ec7e37a1440f00d872534f5dff42f55911bc972061253a51cfc5afd446e61c2761fe9a9f077151a66e43899a26ba084df80f84b0494c9505e9e030f584b2d66da7a73bf41247045f9e31fea9e70016a23add1d02f4cbeb901ccb35a2c3c0f24c25b5"}, 0x7a) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000900)) getresuid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000400)) getegid() socket$unix(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000640)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x6) sendmsg$nl_generic(r5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 20:18:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:37 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 267.804914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 267.810769][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:37 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x3f000000, 0x11, r0, 0x0) 20:18:37 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x248080, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x4, 0x1000}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x401, 0x417, 0x338, 0x0, 0x2, 0x8102, 0x4, 0x29, 0xc178, 0x2, 0xbd41, 0x0, 0x2, 0x3ff, 0x8, 0x7ff, 0x80000001, 0x100, 0x4, 0x1, 0x4, 0xfffffffffffffc00, 0x6, 0xfffffffffffffff8, 0xffffffff, 0x9, 0x9, 0x1, 0x800, 0x70, 0x400, 0x401, 0x8, 0x9, 0xeb51, 0x0, 0x8, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x80, 0x7fff, 0x6, 0x9, 0xfff, 0x7ff, 0x9}, r3, 0xd, r0, 0x1) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r1}) [ 268.169450][ T26] audit: type=1804 audit(1553199518.115:59): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/128/file0/bus" dev="ramfs" ino=42565 res=1 20:18:38 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xa, 0x0) 20:18:38 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = dup2(r1, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:38 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) move_pages(r0, 0x3, &(0x7f0000000040)=[&(0x7f0000e00000/0x200000)=nil, &(0x7f0000e66000/0x4000)=nil, &(0x7f0000f07000/0x3000)=nil], &(0x7f00000000c0)=[0x0, 0x4], &(0x7f0000000100)=[0x0], 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(r1, 0x406, r1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x400000000000, 0x11, r0, 0x0) 20:18:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x300, r1}) 20:18:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400000, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x2, @time={r3, r4+30000000}, 0x10001, {0x9eeb, 0x5}, 0x4, 0x0, 0x8000}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@nl=@unspec, 0x71, 0x0}, 0x20) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x4e, "3edcf76b06532c4130af9bfb31f7f24098b3054c775b3370c7c292db966f5a2a3b74fe7a3476bc5f6133371d8c33e6a30e0036a969550e6729b9eeb357fb3fbea1bdd3b73e2f2474adf1d18bb00a"}, &(0x7f0000000400)=0x56) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000440)={r6, 0x6}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000140)={{0x7, 0x6, 0x0, 0x6, 'syz1\x00', 0x9}, 0x5, 0x130, 0x101, r7, 0x5, 0x3, 'syz1\x00', &(0x7f0000000100)=['\x00', 'vboxnet0{\x00', '*$+mime_type\x00', 'wlan0\x00', 'ppp1/:.*systembdev\x00'], 0x31, [], [0x2f0e, 0x5, 0x2, 0x6]}) [ 268.604985][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 268.610835][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:38 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x80000001, 0x5, 0x4, 0x1, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={r1, 0x0, 0x3c, 0x1, 0x0, 0x8}, &(0x7f0000000580)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0xffff, 0x40000) socket$inet6(0xa, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000a00)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000500)={r3, 0x1, 0x6, @local}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000002c0)={0xd2b, 0x5, 0xa1a, 0x6}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 20:18:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80003, 0xfff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0xfff}, 0xc) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x440441, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x3, 0x1, 0x4, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) 20:18:38 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = dup2(r1, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xffffffffffffe, 0x11, r0, 0x0) 20:18:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1000000, r1}) 20:18:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x48, 0x0) 20:18:39 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa400295c) r2 = dup2(r1, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xbb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x41e, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:39 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x80000000000000, 0x11, r0, 0x0) 20:18:39 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3000000, r1}) 20:18:39 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) [ 269.405018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 269.582890][ T26] audit: type=1804 audit(1553199519.525:60): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/130/file0/bus" dev="ramfs" ino=42695 res=1 20:18:39 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x80000001, 0x5, 0x4, 0x1, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={r1, 0x0, 0x3c, 0x1, 0x0, 0x8}, &(0x7f0000000580)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0xffff, 0x40000) socket$inet6(0xa, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000500)={r3, 0x1, 0x6, @local}, 0x10) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000002c0)={0xd2b, 0x5, 0xa1a, 0x6}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x76) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) 20:18:39 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 20:18:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000540, r1}) 20:18:39 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x100000000000000, 0x11, r0, 0x0) 20:18:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1200008910, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x4c, 0x0) 20:18:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x4) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x5, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:40 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) io_submit(r1, 0x12e, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="06ea6431db9d69226f3c836eeddac65709318f2dff8f27453eba8df642c9826b861a0dbd81169d9b85b10f334f825ffa35f2dbb4dafe1d73f1e110739611675da67b6e19540e375baddc94f93a79c2e65984f05ee76d066e9d4dfaaedfcb5d255c440a0000000000004ce8ff", 0x6c}]) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000000)="1145a51bb1a35b542844a600f59bc4897b9ce19fa8598d7eae96f1f5f09a0b4e55298491eefa", 0x26}, {&(0x7f00000001c0)="c081f6b6e528e323c7edb586e6e7b02eeef84906e1a160188a965e71fe94a21dc661224c78609a7be62626d850f3dfaa2c99c10ce005ef40a7b0ef8587f743c1d79564ce78e4a1a5776bece121fbf6bbb8235e664324e4cc091bdb2e435de296a48039d5cfb63a0e18ca90b245c0589077c433c578a5480662d9991ee30af0c76f7e66c223b0a360c59d39f70c81cb727cadaeb276f32fb199684396a900baa485c3ec793c1b3d307c56b302e73a2af5c4483ac5049995dec61344d9", 0xbc}, {&(0x7f00000002c0)="91884f79f59a799635d308111483e58b29a843dc96de6197684cdcae3c8d110fef64862e34d23b81400f20822ddf21649f3464d4a7e88c88c1a67b1b843e9349aea630ae665baa7a32473b6e41b1c11c510280ddf9570334355bf7f732cb224f913d06d1e272baec49fc269d160a4f518c9290c4b500302e222e4b0f6fbc46288c28074a84b09abc8ad6556a77b7b109d301d13213a458d8342aeb6bfd83a5687d53870becada6", 0xa7}, {&(0x7f0000000100)}, {&(0x7f0000000140)="696042c1ce961f364544a0738a54cca97f057095ff575ad91f659040fa7d6d9a9c77fa81dde7e8", 0x27}], 0x5) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) setsockopt$packet_buf(r3, 0x107, 0x17, &(0x7f0000000a80)="ffcc6ff627f3b1c74093246ebfa95643292d78e583bb8a0447701fb0ec84945a77fa2e59a1bc9efb5594af891088e20f32f6d76c391bd9eefd3c0712d76531bd74e9bfeb845dc0a8f6b99505316d07ef334ebfb299e343a0050de9677163a7d4938b089696a684784e001a72426b7b2c6ce8a59c92185a02ab33ad71502e59be70045842d2e2c4d67b99cb31ee17d740725e77963393865f798aabca04cef369fc3bf5bf7e1ef7e48fffefe60f68446531186dca54f887183b887ba022e07152e434d456759c8eed8d0dbfe161a8cddebb0b7e0922f1e39797dfbf879ab12d1c", 0xe0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000640)={{0x3, 0x2, 0x8, 0x2, '\x00', 0x6}, 0x2, 0x410, 0x5, r4, 0x1, 0x1, 'syz0\x00', &(0x7f0000000540)=['\x00'], 0x1, [], [0x81, 0xffff, 0x2, 0x909]}) 20:18:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x400000000000000, 0x11, r0, 0x0) 20:18:40 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000541, r1}) 20:18:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0xfd, 0x0, 0x29, 0x0, 0xff6f}, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000780)={0x18, 0x0, 0x2, {0x80000001}}, 0x18) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000940)='/dev/cachefiles\x00', 0x10480, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) io_setup(0x5, &(0x7f00000007c0)=0x0) io_pgetevents(r3, 0xfffffffffffffffc, 0x3, &(0x7f0000000800)=[{}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={0x81}, 0x8}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/114, 0x72}], 0x7}, 0x5}], 0x1, 0x10000, &(0x7f0000000740)={r4, r5+10000000}) 20:18:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x3, 0x2) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000440)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0xa, 0x805, 0x1) timer_create(0x5, &(0x7f0000000180)={0x0, 0x40, 0x1, @thr={&(0x7f00000000c0)="ef5ee99e84c0b1df97ccaac8ff83f2bac442154c5e9b33d93ddc47036bc0fbfba82d24b53861381891e8a2a9bbb2289a1ca243c73f84d8f0b8584ad8340e0f", &(0x7f00000002c0)="93bd4e840bf0b3a06e46765c64b1f5ea644b69b95dac746b55736080bcded08f6b791a89a80d50a7030a495a607905218898903fa73f7cd469bcb5edf4e6bc05dd7f4174a5d353aa7c75a19caa15decbeafb88a5349e13c9e20d05f1d88241cd7698f4211dfb9973ab46d3de3e3136a5a3cba41f46206e738f07bcc6131d2557856af69b5ed414c481a9e5d1c092d3136508332b6190e235065985f4dba124f76224817e34bb2b29a81cab"}}, &(0x7f0000000380)) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r4 = socket(0x11, 0x2, 0x8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffffffff00000000, 0x5, 0x9, 0x3}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) getsockopt(r0, 0x4, 0x7fffffff, &(0x7f0000000200)=""/152, &(0x7f0000000080)=0x98) listen(r3, 0x20001ff) accept$alg(r4, 0x70a000, 0x70a000) sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 20:18:40 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{r0, 0x0, 0x440b}, {r0}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 270.392542][ T26] audit: type=1804 audit(1553199520.335:61): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/131/file0/bus" dev="ramfs" ino=42760 res=1 20:18:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x1000000000000000, 0x11, r0, 0x0) 20:18:40 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xac9a, @ipv4={[], [], @multicast2}, 0x93}, @in={0x2, 0x4e22, @multicast1}], 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:40 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x68, 0x0) 20:18:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1) 20:18:40 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000542, r1}) 20:18:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2, 0x20000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendto(r0, &(0x7f0000000040)="b264502e31b344c24746c65a9bf7e58b75cf844104d5e954bd605e0802860c61a9dc3cdc5091d177ef01e44380d42be5be728b78", 0x34, 0x1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x3f00000000000000, 0x11, r0, 0x0) 20:18:40 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1247c130ff00000000000000402d0000f6000000c63fb7639491f1a5d8f48bf092bfab0fa69b3038ae3c124773c3935fce471b2dd7a1e983dd7e7ba6246b195479bc31009c848c3148d3c1770281e5d9264d4883b7578feb0e0d82112258ded1859177ccbec7e7c9ea6e990931d6343a5e732bd91bd014d89a272beb4b01b5bfeb6160f789f33c51e0ba9390ee07d90b20c4ab57bf50fc0842a08a79eb54a450ada2e1cf9664c58ab2b1e2402cb39fbfa9f5785fc595226563c7b5b33ef50464e00d1b40ad81f5451933cb94ee000000") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x8000000000000000, 0x11, r0, 0x0) 20:18:41 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/13, 0xd}], 0x2, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev}, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, &(0x7f0000005300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005340)={@dev, @dev}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000008840)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) r2 = accept$alg(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0xf5cf) 20:18:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000543, r1}) [ 271.301056][ T26] audit: type=1804 audit(1553199521.245:62): pid=11617 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/132/file0/bus" dev="ramfs" ino=43331 res=1 20:18:41 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x6c, 0x0) 20:18:41 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x83) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r3 = accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0500060005004af89907020003000700bbb7c588868b873db5bd63bc0e278ca522cfde7225c77424606d3b7dd1b824e535792b1dad7a6865ee759bef0d10f6975d1fc00a5e5cf7ed6dee74328c70c098652756f9358ca82e1892d056732f4292ff8419c3bbe595a57de1d073eeb8bfa58befbd5cbf5886334cf6b814de5822416c2342338d56eff585e4e5801411acb05070eec384ca60b5de0c5a1f2db5dbca2cf646c0cf58d6f598da5fb60e40164155ca472e812afde2bc572c4422881757adef5559c74d726e2e59192c7a59d7b0cf7a0a8eeb6ad37173cfd3794293124eb079910e47f4e31fd6200202c5f0538cd5"], &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x208, 0x0, 0x6, r4}, 0x10) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x401, 0x8009, 0xffffffffffffffbf, 0x6, 0x6, 0x2, 0x20, r4}, 0x20) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/13, 0xd}], 0x2, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev}, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, &(0x7f0000005300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005340)={@dev, @dev}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000008840)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) r2 = accept$alg(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0xf5cf) 20:18:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xfeffffffffff0f00, 0x11, r0, 0x0) 20:18:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x40050020, r1}) 20:18:41 executing program 1: creat(0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 271.644942][ C1] net_ratelimit: 3 callbacks suppressed [ 271.644951][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 271.656473][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:41 executing program 1: creat(0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x78b, 0x2) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f00000000c0)=0xdf4, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xffffffff00000000, 0x11, r0, 0x0) 20:18:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x41050020, r1}) 20:18:41 executing program 1: creat(0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 271.884943][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 271.891272][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 271.964947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 271.970842][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.092419][ T26] audit: type=1804 audit(1553199522.035:63): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/133/file0/bus" dev="ramfs" ino=43481 res=1 20:18:42 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x74, 0x0) 20:18:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/13, 0xd}], 0x2, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev}, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, &(0x7f0000005300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005340)={@dev, @dev}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000008840)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) r2 = accept$alg(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0xf5cf) 20:18:42 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x4) 20:18:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x42050020, r1}) 20:18:42 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:42 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10) 20:18:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x43050020, r1}) 20:18:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/13, 0xd}], 0x2, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000540)={@remote, @initdev}, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, 0x0, &(0x7f0000005300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005340)={@dev, @dev}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000008840)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) r2 = accept$alg(r0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0xfdef}], 0x1) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0xf5cf) 20:18:42 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 272.686324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.692783][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.764963][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 272.770773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 272.932125][ T26] audit: type=1804 audit(1553199522.875:64): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/134/file0/bus" dev="ramfs" ino=43568 res=1 20:18:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x7a, 0x0) 20:18:43 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20001004}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1018, 0x31, 0x200, 0x70bd2c, 0x25dfdbfd, {0x10}, [@typed={0x1004, 0x79, @binary="f4040c8430c9b8f121dd6a31e35af562cc86b65056f9ce1fc3abd4994efc30961e703a4e21b45fb0573411fdc3ad0909e6823760f11092fd83fbee2a6b78312ea1c86259bf0bb2e644ad531aec0435240352e81bf52bce472a852d2c318f4bc3a87a64dc39b5026b65cb720dee13929b2118636dc5183ea84e0f2b89cb440155d98ffea0ff04b5cd42bcc91a98b8d5cad80bb460d1723c2f1dbe5f1f91361e5948159b43120b69e3c0171fdd7ade62aba6ab6e721acfef5db69812800d20b0ef6f59c42605561018384134251061fd8be94327c8ca388a73e9ff2f31bbd14583a9d9272dd1de267728d660ef905931cb7ffd21e0336e8ba53b266c4c1057c50b21fcdf86d4d940c95e8223f1feb780fecc1c1e73178f15ee756b704a697b7ec46205d3d03cac7d9f0afe08cd44b71fce0b224e796a0f94f21e2f3570e7306600f91521cab380c3c8f5d7428b256f1d1060842b9f873c8997a177a6c654970b3455c821a434588bbe0d9d47843af9cf49d92e27f4db7cd1baaba9693ae17ecdf62406a00e114c004a8a68840c5dda25bf59d6571ce5f6d43094ece835eb96652e7d6859b21686cc6ce91aad5c6bd1c5d5033fb9abc89b9fc16715468de325421d4fbbe95264cc65eaaae741161640b80b60b969d36c2bb34cce412c3dab6a4b45bb7fb4e426edfc3aa553b49b231fd39a4f95153dffda3f8889c539fdfc71b8aeb7c71b0d1339f8e095331d354e107155da34a76e4a7ba352a56a660a94b2f0f4ab8a586b94b707a14ed3adfefcdad6a772fec86a02d0b57ddef78b9c0dbcab47055effb31cc93a88173cb4e95b8026b00deab29ec4dd0a7b550ecef651a90512156c085c68402daa740ba98a2149fad8bb0c19779d02784e69e23795806b8feeba147d49a83b2d29eebda62de7eb88b4785b67911ea34a84457893ef858e09c688bb2f162797dc18dee806d53921bb688065844fdee5cdf7f21747dfebb6946e4f681bf260ca07048cd92335a075c06335b329af6ba375b3f9d6710d5a1795929a5f5a68d822f8f508975bc5f5803523506fe08657621d1af9047346d242791bb0ebd8274868beff9fa8a2b3dc5f1c5f59263a36dd0297ae79a8b42a56feffe1af9e5aadc55a94dc93da90766c913dd938d35223a41f2af0a07d0469cf425d8080992c99482947dd533ee61bf63f872a44263e3221a86e75ae8489c441208b47acec70877804a769fd79ffcdaed2a7d22f33e020eb7e2ea316e4561205a00d5dde8edd56241ba2834d72af7b4da0399b11098de7583d2d4b58242d8e5d4dec82c99a261b11e26b3f5b8704b85fa29f694ab45ab752b12e7e9085af5b6d45551031a209b9a769a3da94399c82d8bb006e9c775cf76f3284b2adf61304b46e6ce56ad6c13afc6bedff1c7de3cee880d7ee68f17b405fad538ce1f1cd475c5bafb28ca921f70c23ce0735a660de1797187c5b6997a0c3e7292615e63585d91e7c6c1b43789f0342ec4296bbbeca6a0e0a609a1872c7d878a7621dc0173be1b7d7f859edb87910a15acf4355192888a3dcad1596d62b7487b1d0a38d3ce38caeed3ff26034526c198804a9cbbad7d4b375657c545aba021b574cd36383947f9ec6535c889f74d7f2207d76c3e352ecdb48805ca6f8df26d998807ad80fbd38f8e73ef910bdaab092c545880c0e880e84fef96c7c38eaf91c5ec14d2a7e566264b5b4d65310c3f7805ba38a390fd0a4681e101d4b1aa7bb20b70dbdcbcf1ded67a9bb821ac005329d5b736f5423fbf03c22e541d167e0de46ef3278af6c685df1465faa9808a3d73cc63175e8c6076817c4301710f8ffdcd91bc01f7c864c95ac0667e4775cf76bcaecb600381cd5fb9a81b21f44f2e44278f6e51907c819e100a1a5bff5814bead06eaffa79860dbc16db276839730fdb2ebb53d4b69beb6b01bf8c99eebe1f933387507945411842a90e46652d96115404c801ad5df610d6d4942404d701201597f8eb2664daf026bc78ff27afab439402e3c0fa7b2cb3944a5cc919884040086eb7ecbf61f305fcc0232c643843de521f0874c911d14fa99acbabe6dd03b0efa0855b3a4df72c280a37e4e8b774fc4226247287e04c1471b2c5fc9efaa13ec25ea3047f6c471dbd2603bbc5100119435fe9b3989de28049ddbeec7f67ec79c24a854bba7d68cc0bfd5b9113044f5b5406ba56b72444334cbe27f5d221c9a06980b4b0fabbfe5e07961aa3df406ecc2af07d9aac143dd0446780ec89e07fee4f2f781262fcd6b09ab9ee09973b35e0f83d5c50a0c7c0e2686bc968d189307f33aa35f0fa3595b283837d1bf6308e8207bd599c37afcb1b37bf162989decc995340465fbc6b27611fe0352f3d779fd998bdf916ac3d9fbca8fdb4d2ecdf28bce5eed2261513a4b55671f8715ff0b3b5c8b93f5a79fc4580b4e900168c998ab0f8da23b14084e9a5021e0048ff419806cc46ec59bfbee177cbef5e936c872c4cef62a39b366a3239f0b93221a397dac8185bdf1edd8e298016a465fdcb82bab2ac09a571c0a626f10447d72b68b751e596200bd37538d3cb31c0b232e523c847dcb0a94490c6f5e89b6bce4541ecc985c1218d717ccad8ebc6b1529dbda046a0698563edeed00f2d0d664cc2bdf0c05e343e62f1c2cf6434a2e11899a29fdf0d1cbf6fd23967ce29f92c9be078ca890d594e6b556c80822b5e89eb61925228fa4df3735ad45385c6b5b872356e7bc20e124a25606685850962c086f524bec289a9076cf38f334a5cd284241c0c60ef04eaa041a7ddb1ff0fb616fd915f1d1047e84f0ab8a0ba15872ac22f654322aadfb4c1dcd00e3794c07a9743051f0061ae9dc43213be9aaf073343ee854218cbc04ed2239d16621dc7844c824caae3d7e236d0479e80d19326403ad0c9350f610dd1b47e6f8391f6cf8cd0f2bd086b6841861c7c46206d65fcd668a59ae9591f0a6d00223124ddda669b61676d3fe22b8ce365260cdec3e89512c96c17adbeb989005239fb8bd151580acc52cb2aaa6a83a8ba891c6f2b9b6f31fd722b9df2fa3313d61526f67d9a1be721226e02426bf28e0dfe66106bde8ac2782ccaa2011f52eaca8d206e1124c92e36a4fb16ee6a113e8b5c885c3d3520c250ca1d315a9fbbc706570dba5015b2c79becf6a63ce022ae20903bdd736382933331f4c1eea0170542eb41686cd54c4640ecb8440fbcfe1ffb20993c3699b4a1afc6817cbedafa6b97dbdf505e565704e816db656bd4b0ae21f839b1bb1874387cbee23c5e999f9c762bc09bc552480f41505d63c0c05ae8f566bef36c37f9ee8c18f2fea172358772763c0501e430eb34fb112216a50f6d109b589b5716ca20ce830b0519ab44e7c283039b0844fe3a77c6389968716592a5c4f9a2b1c356a0e1f7ba837c9000a4b48dff5543f6cc30e42f574f6539d6e4bd1ba5edec663686b666635bcbc82c131b7f7a30e856a43c1415e96ae8a188d84db77cf07e3f31307af862ebd74c9e50a17d1f58c171d801daea6cbc1067bb7a36d8917489790fdf637c65c0304a39701a75fdbb5f9ec20b7e95c347e9e8ed0a789dc095ed328b05b9755a34071ecf48455c871ec23ffb7427a5ea3f3e478301d78a6a129bba29db2905223c546fbe50efc8d6eab0cbce8a360d1e004da581efa72fcb7bb04d7c0a3ea6937f0d9f741bc4c675f6882cb190319138f35f4f10faba8534d6b4091874daba3e29edd6f4e190aeb2bbb91f9b17a21a2deedcfce1142e6103d42e2e85380a41fc48fb75431a1115478b98804f26939fff26ebbd161d21faae6cbb3fcd34d57e19b16f70a6d706ee3f82c8520197ee23a6468657ab9139285d3e187e686ea82bc3a82472a2da1149424d41d74afd8245230c565af459dabeec4af331a3d57306875eb7447b92905dcf0e0fa4603101d27fa72b22d8476f8086689ae9603a384937c4663cd3b798980bd1bab660c2a9b48c489e195d5ba5cdb8c454e2024c3f44d645defa0f8a59e545bb284e81c5c820ac5f1c771ddfe12ba5494e325e02bb2acf0ca064abc4dae9973751fc94bcf7f7eba33c0cbf703c5e03ab8f3cce6156b20ef6cd59baa7d599d6922d0c0e008ab520a9fe9d8515daca606dd32d5817d585578b877c98583feffcc926773dc68867a4bc08555d3880cf08b3c2916fdc3f859da099204589935e00b051ec2b0130e7a02f577eddb7725f8a97999373d01af928bff1ca3f6e153dc3658317b8e034e1c52b198905489e0becf41097772bf53dc99f9d57ffa8e7d9132f41c0618705cb56ed988e2839ad364bbb75452a1697652d4b6f5836f4c6eab16ebf3e26755021b32066ee14216f14888a10ebe6dbba0ca063953d69fed8c5257a362ce3dc36ac00e6ad9a754563ea5ace34382de5422de0dca956e73855dee605e8103edc977f71b9f58d6f23619a7e846adc014d32512cf2c20c5504ccc37cc5ea8ab1f50641f24c3e515a92323fac714c56e83706acf17418bdee75deb0b41038a1b78e25f385a431096b3f870b6aac16a3817c6d1ce7b25c7d7022fef5c591e07422a06e7878fdf0a91aff0ec734b5b9696005bc6e118e064b5f6e66251a43b635aa16ea48e805bcd3df6ed01911f294084fc3213029c0a15ca4165de59684755fbe0bcbf564b45cb37421a39546ce6f0ef537061f7dc55e3e652f27ecb9130e77dd193a3eacb4a21bea6f1c2429caed27adcea114cad89209c9256ab262ca615be96920dd19f6be899744bcc50f19abd90257e3bd0bb82a282c05a332f9697295692fb7c1d40cfe829d57b8db4680ef494b7625ce44d7f5c84407bc6d6c383acb9eab01bf9acb0c1f68fad18588d1a8ecd6f039dc86d1474ddbb47777fad5bfce1cb057b20b0eeb369ccfa084fa024397a473b9f5002508dcce46281e43bba9aa5f787458c024be1beead8001a155cdafd678537c6f4556aa50ef99e55962c2c76aebbbdc170f2b8b613938c693ee710e4c7f9b42d37082542b1e5dcde23869d1ced82bc5ed3216ff9525e666995916e43cfe906896fdd5a13c077fa34597bb9a10251ea64ed4443bf6d88eb28452a68147f81363fd9e7fe28afface08aace1a608e1b0673fe3629851673056a67261d986dfa7e97db64dbe327e1ed0f451d90d6008233aaba3465362d93beeee6eaf9dac0194e50c4465357664426a4a05bf15be9b98d9efaac60ae9b41c45f77d2421a659b8a1223008761e41bff7ffbefe8cc90c9c3ac3346bbc933e9fd2462f0decb35edd388eb564d36ef1ae8789e21382733bf22baef5b278002fe1a7a2ad98aaf792caa04b8231141fba70fdc78cdf7fa4ddb946c9ad97b13c822f4656a5b9aaff7098ad512fcc1a013feaedd7cb90289d727320e6057aee94b229c87af8dbeb4d3cf513774aaf8721931bacf77ace3885aa76096586a6f0a14bcfb459ff011c9fcc932f35551fa3a95cfda9f53b8751973140fc69ba715e505a18bed21eb531692912da28e04006aeaf4dc7db1cd21fe452d40b9ed96ac2dfd513649f635fcf446627a0ff09e2ab8289c6f402fce68cb7e73f4199af5f4fa593896b34372d6ce45faf62b182b48f3054667e0f59d80e8ac737d197e1b99fbada06cf11ab9700e3adcaa7f2ee5d97c13771983bb9c4761c6b1fb2458d38022b27cdf408782b5ef9990a3603a4bef77fbd9d4de0dd793756f851656b57a2990ef140f8ce6f78b56fddba401710fb7365b4fa2a1b1573d55a5722a4bb3d6669e9a1c3e4ef1b62349c57677345efe14834bdd16d8423a33b64c294b638"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000100), 0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x800, 0x2b80, 0x3ff, 0x4, 0x6}) 20:18:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x3f00) 20:18:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0xfdfdffff, r1}) 20:18:43 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc07123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:43 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0xfffffdfd, r1}) 20:18:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x4000) 20:18:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x300, 0x0) 20:18:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x400007fffe, 0xa2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = shmget$private(0x0, 0x1000, 0x10a, &(0x7f0000ffe000/0x1000)=nil) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x717c, 0xfdf1}, {0x5, 0xffff}]}, 0x14, 0x73363c78264e519e) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000140)=""/198) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) bind(r1, &(0x7f00000000c0)=@nfc, 0x80) 20:18:43 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:43 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x400000) 20:18:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x100000000000000, r1}) 20:18:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:43 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c4600000005180000000000000000003f007c000000f1010000000000004000000000000000c001000000000000670c0000050038000200f7ff0700020006000000ff03000000020000000000000100000000000000dede000000000000030000000000000008000000000000000600000000000000cedd21a7445623c129ee20697ef8e632d1a3ac16c5d158125398d0a4cb49d2da33a006eff5906c630883225152dc4d617c2db05c465dcb2c49782ad3ae8d6c0c46c4099972dd3a8b3aa45cefae606ca51d2bc40668d5858239d1db1afdd9a3f5d2046d3f49b9b604f2db2c5e830610993a38969b5040a8200d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000009500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0bd9a9b593c4a06ad859adaf9fe34915d0fdadd17200000000000091b1dea725c6962f189431ddba6235ef4ae735b39e435c4c22185a14457ece0cb44b8f2053d7aa90f8b4e7441effe10ddd1e8ed78ca0536e7b28b8eb109c2df41a7baa3f9c070e57dcaa60115285b3ac38f2b2c58d9ed98e38a3b08c420c8d1df6f92c36f3af70b213b33bea90b60908cbf179c3a058ec237c4f83b2cafd37bf2374bde475ff69c0535f5095682f4ad21338b4c2f8e80b5abf73fc649e8f3a3e9fa3a50690"], 0xaf1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x37) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/cec#\x00'}, {0x20, '/dev/cec#\x00'}, {0x20, '/dev/cec#\x00'}, {0x20, '/dev/cec#\x00'}, {0x20, '*cgroupbdev@${selfvmnet0'}, {0x20, '/dev/cec#\x00'}, {0x20, 'wlan1ppp1@wlan0em1vboxnet0proc\x1d[!,'}, {0x20, '/dev/cec#\x00'}], 0xa, "816a1fef93e66e6d790f8087cecfc6c6dba007fbda0b7be2c0c7cffa5c288fe74744535a19e6daa350a776a2f3d3273ec000a8664abcc5016947400e62ee2a86b9937e20f0af641cf29912d259fd769d3c879242cb95e7ef3581bb3186cffa165ec6c7b4f75177e24468104632cd47475e616feed0861ac9b544288629c49017b1c13d508ef2a77ec1323d495e80bafd5e2fa8e77f2de4c44937f1285ced770e58b7f2eadb55fa6742f0d9c54f28347149a9f3247b9559dffc121b11eea31389e7c8df31554f14889be09efaec4e"}, 0x157) 20:18:44 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'lapb0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x800000) 20:18:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x300000000000000, r1}) [ 274.392141][ T26] audit: type=1804 audit(1553199524.335:65): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/136/file0/bus" dev="ramfs" ino=44490 res=1 20:18:44 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x500, 0x0) 20:18:44 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 20:18:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x800}, 0x28, 0x2) 20:18:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000000) 20:18:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x4005002000000000, r1}) 20:18:44 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x90042, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={[], 0x3, 0xf1c, 0x1ff, 0x9, 0xfffffffffffffff9, r3}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x81}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={r4, @in={{0x2, 0x4e22, @multicast1}}, 0xffffffff, 0x2}, &(0x7f0000000500)=0x90) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x4e23, 0x1ff, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x3a, 0x0, r6}, {0x70be, 0x9, 0x9, 0x9, 0x1, 0xff, 0x3f}, {0x7, 0x1, 0x0, 0x2}, 0x8, 0x6e6bbb, 0x1, 0x1, 0x3}, {{@in6=@local, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3503, 0x6, 0x0, 0x6, 0x9, 0xd0, 0x7fff}}, 0xe8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r5, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x10001, 0x6, 0x9, 0x3, 0x4}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000001c0)={0xc07f}) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mlockall(0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x8, @mcast2, 0xfff}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x20}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @rand_addr=0x5}, 0xb4}, @in6={0xa, 0x4e20, 0x101, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x3, @local, 0x2}, @in={0x2, 0x4e23, @broadcast}], 0xdc) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:44 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:44 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x4000000) 20:18:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) [ 275.032981][ T26] audit: type=1804 audit(1553199524.975:66): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/137/file0/bus" dev="ramfs" ino=44575 res=1 20:18:45 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x600, 0x0) 20:18:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x4105002000000000, r1}) 20:18:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x1, 0xab, 0x5, 0x40}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000100)={0xa07c, 0x0, 0x3, 0x2, 0xfff}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000001c0)=0x54) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) 20:18:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) dup3(r4, r3, 0x0) 20:18:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 20:18:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x3f000000) 20:18:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 275.817270][ T26] audit: type=1804 audit(1553199525.765:67): pid=11938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/138/file0/bus" dev="ramfs" ino=44736 res=1 20:18:45 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x700, 0x0) 20:18:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x4205002000000000, r1}) 20:18:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 20:18:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x1000, 0x401}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2ef73c76, 0xa, 0x80000001, 0x687, r2}, 0x10) write$P9_RAUTH(r1, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x1, 0x0, 0x6}}, 0x14) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80807, 0x7f) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) ptrace$cont(0xffffffffffffffff, r4, 0x7, 0x800) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x400000000000) 20:18:46 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 20:18:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x801, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x8, [@empty, @empty, @remote, @local, @random="426073b29b4d", @dev={[], 0x18}, @broadcast, @empty]}) 20:18:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:46 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 20:18:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x4305002000000000, r1}) 20:18:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xffffffffffffe) [ 276.503595][ T26] audit: type=1804 audit(1553199526.445:68): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/139/file0/bus" dev="ramfs" ino=45251 res=1 20:18:46 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xa00, 0x0) 20:18:46 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='clear_refs\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3ff, 0x8, 0x2, 0x80000001, 0x1, 0x3, 0x6, 0x4, 0x1d3, 0x38, 0x381, 0x9, 0x5, 0x20, 0x2, 0x4, 0xbf, 0x80000001}, [{0x5, 0x2, 0xffffffffffff34db, 0x4, 0x8, 0x6, 0xf7, 0x13}, {0x5, 0x7ff, 0xffff, 0x8, 0x6, 0x0, 0x4, 0xffffffffffffffe1}], "cab9550a46e9f26294a31c1b8d0fbc103bda0a4761ecf7d1356e67d6e23876ad3a71922a747dbd9fc775ea584c2a44bd2437e44acde3facb267a656b94e1b242292154a73b347128f0324b2ff6b99e145c52460d62609145042ea71a624b4525ea67c86cb478474f1ad4faf0aed59c326028dd997ff7fa74724f23c2f4a3d1d6fa2b9fae35db506a4cd884470b", [[], []]}, 0x305) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:46 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 20:18:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x80000000000000) 20:18:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0xfdfdffff00000000, r1}) [ 276.724337][ T26] audit: type=1804 audit(1553199526.665:69): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/139/file0/file0/bus" dev="ramfs" ino=45305 res=1 20:18:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 20:18:46 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 276.844928][ C0] net_ratelimit: 10 callbacks suppressed [ 276.844938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 276.856729][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff81, 0xa2100) sendto$isdn(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d30000005000000a9da6f19d544e084b808ebdf91a65f656836834d3fadba189d6e4db43f517fca20a10108bb8909917070825370f41fef24d3a4d9308384cbbba0f7e801036a7d2ccff2d16e99ca172c82e9fd1e24ca755e7b44eaddefb1d159703b7f67e541fe14a4635cc211f0210328fccf2189cf2ea040149f50bea2e9e1c4cda88863c19a3c99062111cb8b06f64eb438454db7d6b3eceafc6573e9e76207ce2b62062c74dc63f5c4bb6682a8000000000000000000000000"], 0xbc, 0x8004, &(0x7f0000000180)={0x22, 0xffffffffffffff80, 0x6150, 0x3, 0x8001}, 0x6) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x7, &(0x7f0000ffb000/0x3000)=nil, 0x1) [ 276.924940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 276.930749][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:46 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) 20:18:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x100000000000000) [ 277.226908][ T26] audit: type=1804 audit(1553199527.175:70): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/140/file0/bus" dev="ramfs" ino=45032 res=1 20:18:47 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xffe, 0x0) 20:18:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="980000006bd6d4258857f4191bfca2470001b41b90752608b5895cb115332aa8478ed785a55c849086396d2bc44feadb99079324a49c9e82cc2c54ec63fca528768c105835623debac21165067260210e7eb9bd8482e8dfe5107bd3e0d74fdd81e196f685862c8f7fe1974a761407fa3844e532d0708596f2ebe759d07814243a064d07b158e0f16e59bba4bab862f273005870951093d3741f7b021"], &(0x7f0000000000)=0xa0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={r3, 0x8}, 0x8) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x8, 0x3, 0xaeda, 0x7ff, 0x0, 0x3, 0x80, 0xc, 0x20, 0x6, 0x3, 0xfffffffffffffff8, 0x1000, 0x4, 0x24, 0x6, 0x200, 0x5, 0x0, 0x8, 0x7, 0x1000, 0x3f, 0x9, 0x4, 0x3, 0xbcc, 0x4, 0x6, 0x4, 0x5, 0x1, 0x160d, 0x5, 0x7, 0x10000, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1005c, 0x2, 0x8, 0x0, 0x4, 0x715a01b5, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:47 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) 20:18:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x400000000000000) 20:18:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x3, 0x3, 0x401, 0x1, 0x7fffffff}, 0x3, 0x80}) 20:18:47 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa400295c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) 20:18:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x0, 0x79f2, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x59, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x20) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0xfffffffffffffff6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x90002, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000000000000095090000000000000008000000000000ff0f000000000000f503000000000000eae9095e0000000000000000000000000000ad4b2f1600000000cf9400000000000035024e00000000000200000000000000000000000000"]) 20:18:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x100000000000000) 20:18:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xe4, "227ac72bb53bff714b7a8c36d33c1a629f980a3dac16671d6ee9a0fe736764d54c2814607f82a325a473256f1a2e8a4da0307e3b582c1f631cb83ba6d128dc5e96355c315738a53dd4e9f63adee231a8f166479f6b2873169d53bed015abcdddb2dfd6e9054795d5416a74a5c8ac28a447438f932f1f9ea8682e8cbaf02c19e8af4c1ac55b189b3e7c83d7a5ce4019c7779a01248e91c4c063d93eac47ab5dbb767b74967b756055a9085a19c8897b56b943f6ff72972c7199daa3c4c07bd5c8382a12a478fa7b91915e790416cb1f71ebc3fbac4164371009b636dce51114a60b23704c"}, &(0x7f0000000000)=0xec) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @empty}}}, 0x84) [ 277.884918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 277.890768][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:47 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x2000, 0x0) 20:18:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000000000000000) 20:18:47 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) dup3(r4, r3, 0x0) 20:18:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{0x0, 0x6, 0xfffffffffffffff7, 0x8}, {0x401, 0xfffffffffffffffa, 0xff, 0x5}, {0xf9c6, 0x3, 0x1, 0x3}, {0x9, 0x0, 0x0, 0x200}, {0x7ff, 0x800, 0x200, 0xe0}, {0x3, 0x7, 0x1000, 0x5}, {0x7, 0x3, 0x0, 0x7}, {0x4, 0x877, 0x3, 0x10001}, {0x80000001, 0x7fff, 0x3ff, 0x4b4}]}, 0x10) 20:18:48 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000180)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x462800, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r3}) 20:18:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:48 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x3f00000000000000) 20:18:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000640)='user\x00', &(0x7f0000000680)='$em1\x00') ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @local}, {0x306, @random="f8ecc3d09ecc"}, 0x2, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'gre0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x458, 0x230, 0x118, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1d}, @loopback, 0xffffffff, 0xffffff00, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@local, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x6, 0xfffffffffffeffff, 0x2, 0x20, 0x10000, 0x100000001, 'ip6gre0\x00', '\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x34ef, 0x0, 0x3}}}, {{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffff, 0xff, @mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}, @mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x6, 0x1, 0x9, 0x7, 0x61, 0x9, 'nr0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x247}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@arp={@multicast2, @remote, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0xff, 0x0, 0xff]}, 0xffff, 0x3, 0x100, 0x7053, 0x792, 0x10001, 'tunl0\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x306, 0x0, 0xffffffffffffffa8}, 0xc0) [ 278.204931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.210766][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) [ 278.611935][ T26] audit: type=1804 audit(1553199528.555:71): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/142/file0/bus" dev="ramfs" ino=46410 res=1 20:18:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x20000) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x4) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x16}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x8000) 20:18:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0xfd, 0x0, [0x7, 0x7ff, 0x4, 0xcb90]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x365, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:48 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x3f00, 0x0) 20:18:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) 20:18:48 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000000000000) 20:18:48 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) [ 278.792784][ T26] audit: type=1804 audit(1553199528.735:72): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/142/file0/file0/bus" dev="ramfs" ino=45764 res=1 20:18:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x10000, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x5, @local}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x27}}], 0x68) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:48 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) [ 278.924963][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 278.930892][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="f9354fe655d00b937a6ec82732cc0cca2b3cbd596ed41248c0eed2a4ab97b1e614917b622f17dec00335757c5f98ac08ccaa98b31afa84f0716e9a8ed0be026a2210c6a3f0fe1a8476a2f6e5809fa1e3fc34ef3a4a653fab55e8195f4b0da7ed881afc67d9bc96492ad4726a65a9e66e73132609c4c7e89095d3a284b6ded42a66e3d40ac66a08da07405b87942b9091b27abbb6b08652de2f62cc06fd8409ccea1d14223ce76aeb5efba4883cb0ac2ccd993544979d375b8763a1d8969dfa86fbc25b1e80d222", 0xc7) open_by_handle_at(r1, &(0x7f0000000280)={0xec, 0x5, "591e7d383ed72ad12ca1acad00fe9f89929956adedc82f627693077acad8becc4a0f004e899812d22c3c4c3da08152a429928436727adf8157e228c09c87864e47eba68d2b43ea08b39c53191cefa43044a0f9930f79958eebc4f6c32453965e7e2b2ca98c19b2577c1d77787666fad06ef6b9046fd03b32a733cf396aeb348eadb396409e4dae2c5bd3294dd7ea978005076d8358dbcfe44dbbc934c4de74bdbbd7bb9832ce3fe792b51f71e27f403b7f0c0a34f82dbf38eef2f05f2ac40961074d9f6dcd216fce54522e4f83efda99f6572add5e975bfe0ee3b63c850effe2172dc233"}, 0x20080) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xfeffffffffff0f00) 20:18:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) 20:18:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r3, 0x0) 20:18:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x200000, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) [ 279.482333][ T26] audit: type=1804 audit(1553199529.425:73): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/143/file0/bus" dev="ramfs" ino=46554 res=1 20:18:49 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x4000, 0x0) 20:18:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xffffffff00000000) 20:18:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = dup2(r0, r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r4) fstat(r5, &(0x7f0000000700)) dup3(r4, r3, 0x0) 20:18:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x41}, 0x1) 20:18:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f3188b070e4dc3420ee06981020fd8c5352d46f8a51e0e57d9427e87e0b5f3876b6444ac431f93d29b1c3ca3dc6763636e36e5cd1291d7d47bb94506fd5fd8e295874bd1614b27b827a84e21b8c69a7eeb9fc60cf77fbb2bd50bf2f45b32b67ee2d80a6f7bc4c") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @rand_addr=0x5}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x253, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='vcan0\x00', 0x9, 0x1, 0x8000}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/124) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x41, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="3600000065c64a1d8143cce13e8474e4f7306ac637c1c9f8ce6505ca4034fa7da9d03a80c7733ccf4d743bf36d563bd0cf87119e36533ebc5d85"], &(0x7f00000002c0)=0x3e) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000480)={r3, 0x173, "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"}, &(0x7f0000000380)=0x17b) 20:18:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xe0f}) 20:18:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x181000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000006c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@ipv4_delroute={0xd0, 0x19, 0x10a, 0x70bd25, 0x25dfdbfd, {0x2, 0xa0, 0x20, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x1c00}, [@RTA_IIF={0x8, 0x1, r2}, @RTA_UID={0x8, 0x19, r3}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_METRICS={0x94, 0x8, "b5f9de372b64dcbd34c1f14d38f8cb7a47b43d4ed28cdc0431adeea69905b62f2a5bffb9934f29de8ed7aa4384ed6dc253cb8841699ae92f86eedf7189296b3f498728e01d1642a5490ceb9f2c985e78625b9c38e872a3394ba2584976f5c1dfa3e24fcd3ff3e31955acb4bf05aff65402cb462286a9ceca1c1a5c8999986e3a15bd0b61fd3bf897dcc2245423"}, @RTA_IIF={0x8, 0x1, r4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000000)=0x1f) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r6}) socket$packet(0x11, 0x0, 0x300) [ 280.022184][T12230] Unknown ioctl 4734 [ 280.066128][T12230] Unknown ioctl 4734 20:18:50 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x4800, 0x0) 20:18:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x7, @remote}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xffff, @empty, 0x800}, r4}}, 0x30) 20:18:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000480)=""/94, &(0x7f0000000500)=0x5e) 20:18:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000180)={0xbc, 0x2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x6000, 0x1000, &(0x7f00001bf000/0x1000)=nil}) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r2, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x3, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0xffffffff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0xffffff97) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8c001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x36}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x19}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6a268142}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x85}, 0x0) 20:18:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:50 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x4c00, 0x0) 20:18:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x9b5cee89a4f00901, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000007c0)={0x5, [0xf108, 0x2, 0x0, 0x4, 0xffb5]}, &(0x7f0000000800)=0xe) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000780)=0x10000, 0x4) close(r1) ioctl$KDSETLED(r1, 0x4b32, 0x6) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = semget$private(0x0, 0x2, 0x32) semctl$SETVAL(r3, 0x2, 0x10, &(0x7f0000000840)=0x7a) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/218, 0xda}], 0x5, &(0x7f0000000740), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000740)={0x29, 0x6, 0x0, {0x5, 0x4}}, 0x29) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup3(r4, r3, 0x0) 20:18:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000140), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x60, 0x8a6d, 'vlan0\x00', 'ip6erspan0\x00', 'sit0\x00', 'dummy0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1d8) 20:18:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) listen(r2, 0xd96) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) delete_module(&(0x7f0000000100)='selfeth0nodevuserem0eth1\xd0,\x00', 0x800) socket$pppoe(0x18, 0x1, 0x0) 20:18:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x8bf0a2e3503f349) 20:18:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x80040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeac, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1, 0x9, 0x2, "428e99bdc0739128fdeb165c23585cf4d06569e7035fea2ac681cf1fc0818ec1", 0x32314d48}) 20:18:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 20:18:51 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x6800, 0x0) 20:18:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) fsync(r1) 20:18:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 20:18:51 executing program 5: getpid() r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x6011, r1, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:51 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="e1214315b4e0e1c75f754cc1a7be2b5e4d2d15f0b6b87792c45011aa29676d92b9f1ae496a3c7bc180b8bec1526e017c9d751ffa48664d99f76de58da7fe4792f8d4e055cd4e67fe21e28b1ccbe6d010f9e97191319563318fa50a56a0e5ce6354713d", 0x63) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0xc7b, 0x5, 0x1, 0x3, 0x9, 0x400, 0x3ff, 0x58, 0x2, 0xfff, 0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x4, 0xb}}) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) 20:18:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup2(r1, r4) dup3(r4, r3, 0x0) 20:18:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) fsync(r0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$RTC_AIE_OFF(r1, 0x7002) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) close(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8) 20:18:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 20:18:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:52 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x6c00, 0x0) 20:18:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x420000) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0xffffffffffffff00, 0x4) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) write$P9_RXATTRCREATE(r2, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x100, 0x2) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x4000, 0x0) 20:18:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) clock_gettime(0x5, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x5, 0x0, 0xa, 0xff, 0xc}) 20:18:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000258000)="17000000020001000003be8c5ee17688a3000008010100ec1fda1e0336030000000000000098fc5ad9485bbb6a8800000000dba67e0600000000000200df018000000000f5009cee4a5acb3da400001fb700670000c88ebbff0601150039010000000000000000000609edffffffffffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa9512cbf320ec39f02d47c59cc16268b6026eb4bf6ba2112ce68bf17a6e019b7487067c12f", 0xb8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) [ 282.284942][ C1] net_ratelimit: 8 callbacks suppressed [ 282.284949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 282.296445][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="1adc1f533c1200010000117cbcc3b4f17ace865dbb29e421cd5d7c35cec9d0cd73df1bcbdb20872c4762d11e8f36f524d84151b2da08e3a502eb2647a40942838b31ad7adfc3138e7b669c8b94599e92a17b8ba473968d190984e4d4f1855987e64ccf2ca2a6d13e14ec727a1c4833") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x90982, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000400)={0x0, @sliced={0x8001, [0x4, 0x7f, 0x7, 0x2, 0x76, 0x100000000, 0x0, 0x10001, 0x7fffffff, 0x80000000, 0x100000000, 0x100, 0x81, 0x8, 0x5e4273e8, 0x8, 0x2, 0x1, 0x679, 0x1, 0xfa, 0x5, 0x80, 0x56, 0x0, 0x1, 0x7, 0x8001, 0x329590e5, 0x8, 0x7fffffff, 0x3, 0x0, 0x6, 0x4, 0x0, 0x4, 0x4f800000000000, 0x100000001, 0x79f3, 0x7, 0x9, 0xfffffffffffffffd, 0x5, 0x3, 0x3, 0x101, 0x9], 0x8}}) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="ce94f274249efd4cf1f7388be177313484db8d094ae3f22840f9a8ecebee69c014b590fee483fdb2566bb4807fbe4df06c4af3ff21dcd88cd2fe6dee8b73ab778492bb3d84f7049a38b3a47f90ebe89b2d2e85d40508d41f4e124595d8a0b776b9b8720e914798a30be79b2761", 0x6d}, {&(0x7f0000000140)="7f88d9b0a1cff9beedf3d1fbdd7dbcee4287d7e11e8f81f0c1f71b71c0f6ad6f9deb71640c87079456a1f4f8d669cd2e9dab9a7c0b2a6843ff9ccfd4edc17a6d3a65621902", 0x45}, {&(0x7f00000001c0)="6868ccb5a2a98d5b60d4b4cad432108955de646fb3442cb30dbfe1131069280f483036518a88be46cf8144fd8f5cbe65a8ed660976dbf18456ffe4b6f7711590fd770743212762578f8c5a3fbe2a9dcdd3b3cc098ee91341197dd4325d724141032a46f1d4965371d8b3d7f92939999944a6f26f6190344d842a0418161ed931a8423f3b24eb71e9ffbb359d7e6e34d6ef8fbb51118478b8fab553653361ec1054ffe0171f3ebe7d6d70dffd73d5eb77b6834d21b875d0a13fd1dfbffdd09a073e1586f3007ea51a7471a13e4113a52ea046a2eb73932e5c9b265270b9cdd8b90f", 0xe1}, {&(0x7f00000002c0)="18ee86", 0x3}, {&(0x7f0000000300)="d16f8dbd78dc63e7440d3cf484d82a70e87630c84048d492f7ee8c1d", 0x1c}], 0x5) 20:18:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) [ 282.364937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 282.370791][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup2(r1, 0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0x0) 20:18:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x50000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) close(r2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000140)={{0x3, @name="677c84107afab78d0778bc00ff6f027a308056cf58d02b5d707ac5e00ee31d4f"}, 0x8, 0x6fe5, 0x7}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0xfffffffffffffe28) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0x0, 0x8}, 0xb) 20:18:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xacc, 0x402) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x0, {{0x2, 0x4e23, @broadcast}}}, 0x88) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0f1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x80, 0x40000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0xfffffffffffffcf4, 0x100000001, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffff3d8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x10000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2be0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, r2, 0xb) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c581374ff0000d5184cf676"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe65) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f00001bf000/0x4000)=nil, 0x4000, 0x0, 0x1d, r0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x48000, 0x0) mq_timedreceive(r6, &(0x7f0000000240)=""/28, 0x1c, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000100)={{0x40, 0x5}, 'port1\x00', 0x90, 0x0, 0x1ff, 0x1000, 0x6, 0x80000001, 0xfffffffffffff9c5, 0x0, 0x6, 0x20}) set_thread_area(&(0x7f00000001c0)={0x4, 0x20000800, 0x2000, 0x200, 0x8, 0x5, 0xa475, 0x9, 0x100000000, 0xfffffffffffffffe}) [ 282.838343][T12443] Unknown ioctl 1084773155 20:18:53 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x7400, 0x0) 20:18:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) 20:18:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0xfffffffffffffca2}, 0x1) 20:18:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x82, 0x0) close(r1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0xa8, 0xffffffffffffff8f, @buffer={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)="6265c9c649fdf2a5c74cc9974f05d2dcb96aaa26b3e45c53c2799d465cf4f97457efb1dbcac72d9681203a710d2fd05b97d9daaf3e9514f259e1ec4d1fbbd2ff55f4efb2245379eafdf6d216f7601e61cdd25bcf9a168cb51416d0c183be50fd9a730773a404ff1f9568240aee687fbe90ff45a7eb6413b19b1922e8a7812e8e0174f1f507a2b5d5997091e1543c51e12fa2395a759b122d8074af529f14b3b26c97c8880992c5ef", &(0x7f0000000200)=""/34, 0x400, 0x20, 0x1, &(0x7f0000000340)}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) [ 283.164922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 283.170741][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x280800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @dead_binder_done={0x40086310, 0x2}, @dead_binder_done={0x40086310, 0x4}], 0xc9, 0x0, &(0x7f0000000100)="446ebb0f5ce8e5e31c2c2b34b12ebaf223376ecd9a05ef304ff09007e85f45b3d8d6056842bc963855cebc0f4dcb0008ac7ef724df4c65ac63d8924a3cc935917e95a90e705b7c4a59d0a961b662bad8cb09d7599e021beb5952aad7735cf2cd8d97f2caf2fb9107d69a92a42c782757d73a0c04679eebb63b192a23cad532ed9fc669f30e8060777e0c232322ecdac703d7ea0b69ec217be55e497c6a7525a7eb2c81302d839b981135c764c89541bee711ad6c9f22744ea0a5dd442882145857a516bdeb5fbf68d0"}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000240)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, 0xffffffffffffffff, 0x0) 20:18:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:53 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) [ 283.566616][T12435] Unknown ioctl 1084773155 20:18:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) fcntl$setsig(r0, 0xa, 0xb) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x2, r2}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:53 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x7a00, 0x0) 20:18:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x2, 0x3b31) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:53 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x200000000) ioctl$int_in(r0, 0x40000000af00, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x107, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x1000000000003, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xffffffff, 0x7, 0x7e, 0x1ff, 0x1, 0x7, 0x8}, 0x1c) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2, r1}) 20:18:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x36c, r3, 0x210, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x100000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x10000000}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff7b50}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6d85}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x277}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd158}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000000) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x1, 0x10110, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) 20:18:54 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0, 0xfffffffffffffffc}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x3fffff, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xfe0f, 0x0) 20:18:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) 20:18:54 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\'trustedself'}], 0xa, "b0bbc32091d15803715c3a6e9fb891b079f9810d449e4fa84a0baf69fd5dffdc879c487815573d7f6f65d595fe0d148c6277762486e9d92e97e0d0d078847a574f9caeace5775cc35353d3b682e2e7069e3560a0e24122be3f26311406cd1e98d8f88dc6650a"}, 0x7e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x440000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, r5, r6) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000000c0)=0x9) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x5, 0x0, "d6704234a720db2adc468abf88e5e46ab9586c71da848783420aabb27f11fa44bb147448fc5d08384788ff66afdd6ec455990d975572458f9540d40efa847268def9ca8ab7e4ed348ed3dac555442307"}, 0xd8) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0xffffffffffff7fff) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:54 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x4, 0x10000006011, r1, 0x8000000000000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4140, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={r3, &(0x7f0000000140)=""/239}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:54 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x80) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140)=0x10000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x280, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0xa38bba0ec51f6d45) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xfffffea8}, 0x4040) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x34, 0x58, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)) 20:18:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:55 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x1517f, 0x0) 20:18:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:55 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x6, 0x4) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x7ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000480)={0x7, r3}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="eda4ab23f4ebe23d5c59dfbd4b92ea5ac42708f4a563f449780a5cfd4fff1a13fffedcc97b9639cbd1a42a25c2c96eaa6b1df01d1b3d157e9d64900a93aa33cb9e4f", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64=r2], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC=r2, @ANYPTR, @ANYRESHEX=r1], @ANYBLOB="3c02e6ead476b7b5b8392416d0ece55ac3a9505cb5bb5132502326a69838c8addcaa9bf20945eb0a47be5c71f3167bd5bde8fefb9db67491310c2be08c471d9a1880fe6a0f65d5e6774438288fa599c51f3bf2a13576d1403598a74d15bc9cf8bf3317e7db376f9cea474d580fb55ff341eb30fe36cd5530d611cbf6c4fb98040c399dd1da2aee4e000b47bad3e4f05959688dd7db8703825f2115d6e11ca584389fe2d16f9be1c391d42e67f3a486f42b91175593f471fbdeebd01a9ad3cb87b4be9fdcdce13b6d80f3a8e6f742c670bbed8651a89cf2943349c045471f8e15664dd2a7ead05d5e85d6c5", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRES16=r0, @ANYRES32=0x0, @ANYPTR, @ANYRES16=r1, @ANYRESHEX=0x0], @ANYRESOCT=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRES16=r0, @ANYBLOB]]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x67}, {0x7, 0x8}]}, 0x14, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) socket$inet(0x2, 0x5, 0x20) 20:18:55 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) [ 285.244967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 285.250842][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:55 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x111801) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x115, 0xb}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x7f, 0x200, "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", 0x16, 0xfffffffffffffeca, 0xfffffffffffffffd, 0x80000001, 0x9, 0x4, 0x2}, r1}}, 0x128) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, r4, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 20:18:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x4, r1}) 20:18:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xf0ff00, 0x0) 20:18:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/self/net/pfkey\x00', 0x82000, 0x0) bind$isdn_base(r2, &(0x7f0000003700)={0x22, 0x8, 0xd4, 0x20, 0x9}, 0x6) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x40000000080003, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000001, 0x8a882) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)) close(r2) rt_sigpending(&(0x7f0000000140), 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) socketpair(0x10, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x5, 0x1, 0x1, 0x6, 0x800000, 0x80000000, 0x3}, 0x1c) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0x200) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000140)) 20:18:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:55 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000880)=0xe8) getresuid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@loopback, 0x4e21, 0x7, 0x4e22, 0x337aead4, 0xa, 0x20, 0x20, 0x0, r2, r3}, {0x7fffffff, 0x7, 0xdcc, 0x3, 0x0, 0x1, 0x79, 0x44d}, {0x3, 0x6, 0xa, 0x4}, 0x2d, 0x6e6bb1, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x5, 0x2, 0x5, 0x10000, 0xe6, 0x5}}, 0xe8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 20:18:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0xfff000, 0x0) 20:18:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000280)=""/229) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x200000000000000, r1}) 20:18:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x88) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:56 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:56 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x20) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x4000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="ac1761ea0a3ea51fa4a02e53551ba3d9", 0x10) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x10000000000, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x8, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}]}) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) socket$inet6(0xa, 0x2, 0x0) ptrace$setsig(0x4203, r3, 0x400, &(0x7f0000000200)={0xc, 0x8, 0x7f}) [ 286.445050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 286.450966][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:18:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xbd, 0x400) setsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000100)="b781bb18e1a085f5d262ded136", 0xd) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000001380)={{0xa, 0x4e24, 0x40, @remote, 0xed5f}, {0xa, 0x4e21, 0xc0, @empty, 0x8}, 0xa17, [0x3, 0x7, 0x5, 0x408, 0x7, 0x2, 0x9, 0x4]}, 0x5c) write$P9_RMKNOD(r3, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x80, 0x0, 0x4}}, 0x14) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x202, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x3, r1}) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r1, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0xffffff5e) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 20:18:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x69, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x3, [0x5e5a, 0xfbd6, 0x100000000]}, &(0x7f0000000140)=0xa) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 20:18:56 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x1000000, 0x0) 20:18:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x6, 0x4) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x7ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000480)={0x7, r3}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="eda4ab23f4ebe23d5c59dfbd4b92ea5ac42708f4a563f449780a5cfd4fff1a13fffedcc97b9639cbd1a42a25c2c96eaa6b1df01d1b3d157e9d64900a93aa33cb9e4f", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64=r2], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC=r2, @ANYPTR, @ANYRESHEX=r1], @ANYBLOB="3c02e6ead476b7b5b8392416d0ece55ac3a9505cb5bb5132502326a69838c8addcaa9bf20945eb0a47be5c71f3167bd5bde8fefb9db67491310c2be08c471d9a1880fe6a0f65d5e6774438288fa599c51f3bf2a13576d1403598a74d15bc9cf8bf3317e7db376f9cea474d580fb55ff341eb30fe36cd5530d611cbf6c4fb98040c399dd1da2aee4e000b47bad3e4f05959688dd7db8703825f2115d6e11ca584389fe2d16f9be1c391d42e67f3a486f42b91175593f471fbdeebd01a9ad3cb87b4be9fdcdce13b6d80f3a8e6f742c670bbed8651a89cf2943349c045471f8e15664dd2a7ead05d5e85d6c5", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRES16=r0, @ANYRES32=0x0, @ANYPTR, @ANYRES16=r1, @ANYRESHEX=0x0], @ANYRESOCT=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRES16=r0, @ANYBLOB]]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:56 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x529100, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x3ff, 0x101, 0x20, 0x8, 0x401, 0x5}, 0x5, 0xffffffff, 0x5}) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r2, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4001, 0x0, 0x800, 0xab7}) 20:18:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x204000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x0, 0xa}}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x100000, 0x0, 0x105001], 0x100, 0x20, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup2(r2, r5) fstat(r6, &(0x7f0000000700)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 20:18:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffc99}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20140, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 20:18:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x280000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x5b1000, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:57 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) [ 287.571521][ T26] audit: type=1804 audit(1553199537.515:74): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/155/file0/bus" dev="ramfs" ino=51364 res=1 20:18:57 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x2000000, 0x0) 20:18:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x3, 0x4, 0x3, 0x1}, 0x42, [0x3, 0x9, 0x8, 0x5, 0x3, 0x800, 0x4, 0x6, 0x0, 0x8, 0x1, 0x10000, 0x7, 0x2, 0x7fff, 0x1, 0xe70, 0x0, 0x9, 0x3f, 0xfd, 0x7, 0x2, 0x3, 0x7, 0xcd, 0x14, 0x5, 0x7fe, 0x964, 0x2, 0x400, 0x9506, 0xfffffffffffffff7, 0x5, 0x1, 0x3f, 0xffffffffffffffff, 0xbf, 0xffffffffffffae2a, 0x0, 0x0, 0x2, 0x1f, 0x2, 0x3, 0x2, 0x8, 0x100000001, 0xf696, 0x5, 0x5, 0x14, 0x5, 0x6, 0x8, 0x4, 0xff, 0x6a4e, 0x200, 0x8, 0x0, 0x3, 0xfffffffffffff0f7], [0x0, 0x8, 0x2, 0x8, 0x1, 0x3ff, 0x8, 0x8, 0x7ff, 0x1d, 0x1, 0x9, 0x56, 0x10000, 0x2, 0x23, 0x7, 0x5, 0x3, 0xfff, 0xb7d, 0x400, 0x3bc, 0x1, 0x8, 0x20, 0x4, 0x1f, 0x0, 0x5, 0x8001, 0x7fff, 0x65a, 0x101, 0x1, 0x1f, 0x8, 0x4, 0x5, 0x6, 0x1, 0xffffffff, 0x9, 0x8001, 0x7, 0x2, 0xd27a, 0x0, 0x10000, 0x80, 0x6, 0x1, 0x101, 0x8, 0x100000001, 0x7, 0x100, 0x7, 0x3, 0x80000001, 0x3, 0x3, 0x7ba547b9, 0x1ff], [0x9, 0x5, 0x200000, 0x9, 0x95, 0x4ec, 0x3, 0x5f, 0xff, 0x0, 0x3, 0x5, 0xffff, 0x2, 0xffffffffffff29e7, 0x5, 0xffffffff, 0x7, 0x13, 0x8000, 0xd70f, 0x3, 0x80000000, 0x7f, 0x0, 0x7, 0x1, 0x2, 0x1, 0x1, 0x23ba, 0x2, 0x868d, 0x1, 0x5, 0x300, 0x7, 0x0, 0x0, 0xff2f, 0x7fffffff, 0x1, 0x4, 0x7, 0x5, 0x3, 0x2, 0x2, 0x800, 0x101, 0x20, 0x0, 0x6, 0x0, 0x5f, 0x8f8, 0x30e6d95c, 0x71b, 0xfffffffffffffc00, 0x6, 0x0, 0x4, 0x80000001, 0xffffffff], [0x7f8a, 0x80, 0x1ff, 0x8, 0x5, 0x0, 0x6b49e298, 0x14f, 0x80, 0x1, 0xffffffff, 0x8, 0x452, 0x1, 0x0, 0x2, 0x16, 0x2, 0x3, 0x36e, 0x1f, 0x3, 0x81, 0x9, 0x2, 0x7, 0x7f, 0xeae5, 0x7, 0x3f, 0x7, 0x4, 0x3, 0x7, 0x7, 0x1ff, 0x81, 0x7, 0x2, 0x5f0c, 0x7f, 0x5, 0x8, 0x1de, 0x7, 0x0, 0x82, 0x80, 0x1000, 0x9, 0x2, 0x0, 0xe6f, 0x1f, 0x2, 0x4, 0x8, 0x26e, 0x7f, 0x0, 0x9, 0x7, 0xffffffff, 0xfd]}, 0x45c) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x20000, 0x0, 0x100000001}, r3, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x300, 0x0) 20:18:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:57 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, 0xffffffffffffff9c}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:57 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0xc602, 0x4a}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 20:18:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x100000003fb8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x9}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}], 0x38) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:18:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, 0x0) socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:58 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) [ 288.151122][ T26] audit: type=1804 audit(1553199538.095:75): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/283/file0/bus" dev="ramfs" ino=50981 res=1 [ 288.194282][T12827] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 288.280907][T12827] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 288.284942][ C1] net_ratelimit: 2 callbacks suppressed [ 288.284950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 288.299112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 288.468744][ T26] audit: type=1804 audit(1553199538.415:76): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/156/file0/bus" dev="ramfs" ino=51502 res=1 [ 288.524944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 288.530824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 288.604950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 288.610845][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:18:58 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x3000000, 0x0) 20:18:58 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)) socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3ff) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x31, 0xce, &(0x7f0000000100)="af9b9298de2c0510b91b1c6a39874e2661fc3e38f8dfb76a0110bdd26a4cff1713a3f8269254898082456817e58ba0460c", &(0x7f0000000140)=""/206}, 0x28) 20:18:58 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8}, 0xfffffdfa) open(&(0x7f0000000780)='./bus\x00', 0x300, 0x0) [ 288.840933][ T26] audit: type=1800 audit(1553199538.785:77): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=51502 res=0 20:18:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)) socket$inet(0x2, 0x80001, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) dup3(r3, r2, 0x0) 20:18:58 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x2, 0x80001, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) 20:18:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000001440)={0x4, 'syz0\x00'}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1f) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x0) [ 289.235092][ T26] audit: type=1804 audit(1553199539.175:78): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/284/file0/bus" dev="ramfs" ino=52319 res=1 [ 289.325182][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 289.331161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 289.405031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 289.410900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 289.488744][ T26] audit: type=1804 audit(1553199539.435:79): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/157/file0/bus" dev="ramfs" ino=52367 res=1 [ 293.484986][ C0] net_ratelimit: 20 callbacks suppressed [ 293.484995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.496559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 293.565000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.570820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 294.364961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 294.370936][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 294.524953][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 294.530886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 294.765153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 294.771162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 298.524970][ C0] net_ratelimit: 18 callbacks suppressed [ 298.530682][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 298.536486][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 298.684949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 298.690777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 298.924943][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 298.930832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 299.004980][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 299.010843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 299.724967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 299.730790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.884973][ C0] net_ratelimit: 22 callbacks suppressed [ 303.884982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.896549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.965019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.970952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 304.766388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 304.772454][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 304.924915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 304.930690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 305.164935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 305.170860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 308.924959][ C0] net_ratelimit: 18 callbacks suppressed [ 308.924968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.936570][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 309.084947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 309.090854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 309.324937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 309.330734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 309.404970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 309.410930][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 310.124929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.130799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 314.284942][ C0] net_ratelimit: 22 callbacks suppressed [ 314.284951][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 314.296615][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 314.364958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 314.370792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 315.164959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 315.170873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 315.324901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 315.330785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 315.564937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 315.570760][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 319.324996][ C0] net_ratelimit: 18 callbacks suppressed [ 319.330852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.337125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 319.484967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 319.493002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 319.724965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 319.731369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 319.804986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.811295][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 320.524984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 320.532163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.684936][ C0] net_ratelimit: 22 callbacks suppressed [ 324.684943][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.697496][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.764992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.770822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 325.564962][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.570778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 325.724933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.731146][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 325.964948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.970784][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 329.724967][ C0] net_ratelimit: 18 callbacks suppressed [ 329.724977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 329.736498][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 329.884959][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 329.890848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 330.124954][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 330.131110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 330.204948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.210858][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 330.925022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 330.930891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.084956][ C0] net_ratelimit: 22 callbacks suppressed [ 335.090648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.096440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.164982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.170795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 335.964954][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 335.970773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 336.124936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.130845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.364942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.370749][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 340.124976][ C0] net_ratelimit: 18 callbacks suppressed [ 340.130697][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.136502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 340.284947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 340.290761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 340.524944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 340.530746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 340.604975][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.610854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 341.324962][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 341.330799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.484935][ C0] net_ratelimit: 22 callbacks suppressed [ 345.484941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.496672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.564989][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.570883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.364950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.370759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.524948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 346.530772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 346.764953][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 346.770807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 350.524911][ C0] net_ratelimit: 18 callbacks suppressed [ 350.524917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.536618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 350.684933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 350.690982][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 350.924932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 350.930746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 351.004914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 351.010689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 351.724968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 351.738706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.884924][ C0] net_ratelimit: 22 callbacks suppressed [ 355.884931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.896656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.964996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.970843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.774983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 356.780908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.924949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 356.930777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 357.164987][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.170869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 360.924941][ C0] net_ratelimit: 18 callbacks suppressed [ 360.924949][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 360.936811][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.084942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.090768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 361.324940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.330815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 361.404942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 361.410725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.124941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.131077][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.284949][ C0] net_ratelimit: 22 callbacks suppressed [ 366.284959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.296473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.364999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.370817][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 367.164955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 367.170784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 367.324926][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 367.330805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 367.564950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 367.570775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 371.324903][ C0] net_ratelimit: 18 callbacks suppressed [ 371.324910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 371.336485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 371.484942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 371.490755][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 371.724933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 371.730747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 371.804930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 371.810762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 372.525022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.530835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.684939][ C0] net_ratelimit: 22 callbacks suppressed [ 376.684945][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.696718][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.765001][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.770835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 377.564964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 377.570804][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 377.724911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 377.730705][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 377.964943][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 377.970779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 381.724919][ C0] net_ratelimit: 18 callbacks suppressed [ 381.724925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 381.736755][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 381.884935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 381.890719][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.124952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.130785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.204955][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.210793][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.924939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.930747][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.084909][ C0] net_ratelimit: 22 callbacks suppressed [ 387.084915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.096387][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.165002][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.170838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.964977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.970991][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 388.124914][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.130814][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 388.364908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.370832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 392.124905][ C0] net_ratelimit: 18 callbacks suppressed [ 392.124911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 392.136532][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 392.284957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.290880][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 392.524938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.530842][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 392.604911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 392.613346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.324937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.331069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.484930][ C0] net_ratelimit: 22 callbacks suppressed [ 397.484936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.496481][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.564998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.570913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 398.364966][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 398.371197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 398.524915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 398.531093][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 398.764930][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 398.770758][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 402.524908][ C0] net_ratelimit: 18 callbacks suppressed [ 402.524914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.536416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 402.684911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 402.690697][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 402.924942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 402.930944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.004916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.011001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.724937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.730883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.884969][ C0] net_ratelimit: 22 callbacks suppressed [ 407.890694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.896507][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.964995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.970824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 408.764964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 408.770793][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 408.924921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 408.930845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 409.164936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 409.170798][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.924906][ C0] net_ratelimit: 18 callbacks suppressed [ 412.924912][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 412.936584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.084952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.090772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.324934][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.330742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.404906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.410786][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 414.124957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.130933][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.284948][ C0] net_ratelimit: 22 callbacks suppressed [ 418.290650][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.296434][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.364996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.370822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.164957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.170779][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.324927][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.330842][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 419.564932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.570743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.324926][ C0] net_ratelimit: 18 callbacks suppressed [ 423.324935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.336727][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 423.484937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.490818][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.724946][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.730927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 423.804910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.810813][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.524960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.530783][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.684966][ C0] net_ratelimit: 22 callbacks suppressed [ 428.690675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.696477][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.765007][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.771635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 429.564966][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 429.570795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 429.724939][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.731437][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 429.964922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.970830][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.724907][ C0] net_ratelimit: 18 callbacks suppressed [ 433.724914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.736396][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 433.884932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.891143][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.124896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.130660][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.204970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.210754][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.924950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.931287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.084932][ C0] net_ratelimit: 22 callbacks suppressed [ 439.084939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.097169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.164999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.170820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.964953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.970772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 440.124922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.130729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 440.366911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.372713][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.124938][ C0] net_ratelimit: 18 callbacks suppressed [ 444.124948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.137179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.284944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.290852][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.524948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.530804][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.604908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.610798][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.845071][ T1042] INFO: task syz-executor.0:12826 blocked for more than 143 seconds. [ 444.853189][ T1042] Not tainted 5.1.0-rc1+ #31 [ 444.858779][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.868015][ T1042] syz-executor.0 D28384 12826 7737 0x00000004 [ 444.874371][ T1042] Call Trace: [ 444.878128][ T1042] __schedule+0x817/0x1cc0 [ 444.882666][ T1042] ? __mutex_lock+0x721/0x1310 [ 444.887977][ T1042] ? __sched_text_start+0x8/0x8 [ 444.892866][ T1042] schedule+0x92/0x180 [ 444.897512][ T1042] schedule_preempt_disabled+0x13/0x20 [ 444.903126][ T1042] __mutex_lock+0x726/0x1310 [ 444.908433][ T1042] ? vhost_net_stop_vq+0x2d/0x120 [ 444.913587][ T1042] ? mutex_trylock+0x1e0/0x1e0 [ 444.918929][ T1042] ? kasan_check_write+0x14/0x20 [ 444.923898][ T1042] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 444.931510][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 444.936855][ T1042] ? wait_for_completion+0x440/0x440 [ 444.942339][ T1042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.949169][ T1042] mutex_lock_nested+0x16/0x20 [ 444.953952][ T1042] ? mutex_lock_nested+0x16/0x20 [ 444.959310][ T1042] vhost_net_stop_vq+0x2d/0x120 [ 444.964189][ T1042] ? handle_rx_kick+0x50/0x50 [ 444.969387][ T1042] vhost_net_release+0x5d/0x260 [ 444.974264][ T1042] __fput+0x2e5/0x8d0 [ 444.978793][ T1042] ____fput+0x16/0x20 [ 444.982790][ T1042] task_work_run+0x14a/0x1c0 [ 444.987747][ T1042] exit_to_usermode_loop+0x273/0x2c0 [ 444.993150][ T1042] do_syscall_64+0x52d/0x610 [ 444.998179][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.004085][ T1042] RIP: 0033:0x411fc1 [ 445.008351][ T1042] Code: ff 85 c0 75 0c 48 c7 03 c0 22 41 00 e9 a6 fe ff ff be 4c 37 44 00 48 89 ef e8 1b 94 ff ff 85 c0 75 0c 48 c7 03 f0 22 41 00 e9 <89> fe ff ff 31 c0 48 89 ee bf 30 31 44 00 e8 5c f0 00 00 b8 14 fc [ 445.028545][ T1042] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 445.037560][ T1042] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411fc1 [ 445.045920][ T1042] RDX: 0000000000000037 RSI: 0000000000740f88 RDI: 0000000000000003 [ 445.053997][ T1042] RBP: 0000000000000000 R08: 0000000000046570 R09: 0000000000046570 [ 445.063311][ T1042] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001 [ 445.071686][ T1042] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 445.080179][ T1042] [ 445.080179][ T1042] Showing all locks held in the system: [ 445.088270][ T1042] 1 lock held by khungtaskd/1042: [ 445.093380][ T1042] #0: 00000000c3050c16 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 445.103164][ T1042] 1 lock held by rsyslogd/7604: [ 445.108319][ T1042] #0: 00000000e9ddf74a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 445.117269][ T1042] 2 locks held by getty/7695: [ 445.121950][ T1042] #0: 000000003b217620 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.131327][ T1042] #1: 00000000557d752b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.141426][ T1042] 2 locks held by getty/7696: [ 445.146530][ T1042] #0: 000000005c8e38c7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.155950][ T1042] #1: 0000000078503e41 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.165888][ T1042] 2 locks held by getty/7697: [ 445.170572][ T1042] #0: 000000002840b774 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.180062][ T1042] #1: 00000000b2bcd6ca (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.190851][ T1042] 2 locks held by getty/7698: [ 445.195949][ T1042] #0: 0000000072aaf341 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.205316][ T1042] #1: 0000000011776945 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.215291][ T1042] 2 locks held by getty/7699: [ 445.220080][ T1042] #0: 00000000a0c3085a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.229498][ T1042] #1: 000000008df8d7da (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.239440][ T1042] 2 locks held by getty/7700: [ 445.244227][ T1042] #0: 00000000658a1601 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.253834][ T1042] #1: 00000000ec5f27cf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.263990][ T1042] 2 locks held by getty/7701: [ 445.269021][ T1042] #0: 0000000006e87f08 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 445.278640][ T1042] #1: 00000000c405a7d6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 445.288896][ T1042] 1 lock held by syz-executor.0/12826: [ 445.294366][ T1042] #0: 00000000413593a8 (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120 [ 445.303618][ T1042] 1 lock held by vhost-12827/12828: [ 445.309235][ T1042] [ 445.311609][ T1042] ============================================= [ 445.311609][ T1042] [ 445.321276][ T1042] NMI backtrace for cpu 0 [ 445.325727][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.325776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.337331][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc1+ #31 [ 445.345161][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.355219][ T1042] Call Trace: [ 445.358622][ T1042] dump_stack+0x172/0x1f0 [ 445.362961][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 445.368212][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 445.373868][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 445.379868][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 445.385771][ T1042] watchdog+0x9b7/0xec0 [ 445.389942][ T1042] kthread+0x357/0x430 [ 445.394022][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 445.399671][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 445.405931][ T1042] ret_from_fork+0x3a/0x50 [ 445.410433][ T1042] Sending NMI from CPU 0 to CPUs 1: [ 445.416214][ C1] NMI backtrace for cpu 1 [ 445.416220][ C1] CPU: 1 PID: 10983 Comm: kworker/u4:12 Not tainted 5.1.0-rc1+ #31 [ 445.416227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.416231][ C1] Workqueue: bat_events batadv_nc_worker [ 445.416238][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50 [ 445.416250][ C1] Code: 90 90 90 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 00 ee 01 00 65 8b 15 e8 7d 91 7e 81 e2 00 01 1f 00 75 2b 8b 90 e0 12 00 00 <83> fa 02 75 20 48 8b 88 e8 12 00 00 8b 80 e4 12 00 00 48 8b 11 48 [ 445.416254][ C1] RSP: 0018:ffff888059227bd0 EFLAGS: 00000046 [ 445.416262][ C1] RAX: ffff8880981a0300 RBX: 0000000000000000 RCX: ffffffff8175d620 [ 445.416267][ C1] RDX: 0000000000000000 RSI: ffffffff8175d629 RDI: 0000000000000005 [ 445.416273][ C1] RBP: ffff888059227bd0 R08: ffff8880981a0300 R09: ffffed1014ab8dec [ 445.416278][ C1] R10: ffffed1014ab8deb R11: ffff8880a55c6f5b R12: ffffffff86f2d177 [ 445.416283][ C1] R13: ffffffff870f4481 R14: ffffffff8144b51a R15: 0000000000000065 [ 445.416289][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 445.416293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.416299][ C1] CR2: ffffffffff600400 CR3: 0000000055f87000 CR4: 00000000001406e0 [ 445.416304][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.416310][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.416313][ C1] Call Trace: [ 445.416317][ C1] trace_hardirqs_off+0x59/0x220 [ 445.416321][ C1] ? batadv_nc_purge_paths+0x267/0x370 [ 445.416325][ C1] ? batadv_nc_to_purge_nc_path_coding+0x170/0x170 [ 445.416329][ C1] __local_bh_enable_ip+0x11a/0x270 [ 445.416333][ C1] _raw_spin_unlock_bh+0x31/0x40 [ 445.416337][ C1] batadv_nc_purge_paths+0x267/0x370 [ 445.416340][ C1] batadv_nc_worker+0x2cf/0x760 [ 445.416344][ C1] process_one_work+0x98e/0x1790 [ 445.416348][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 445.416352][ C1] ? lock_acquire+0x16f/0x3f0 [ 445.416355][ C1] worker_thread+0x98/0xe40 [ 445.416358][ C1] kthread+0x357/0x430 [ 445.416363][ C1] ? process_one_work+0x1790/0x1790 [ 445.416367][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 445.416370][ C1] ret_from_fork+0x3a/0x50 [ 445.418727][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 445.646509][ T1042] CPU: 0 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc1+ #31 [ 445.654405][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.664476][ T1042] Call Trace: [ 445.667785][ T1042] dump_stack+0x172/0x1f0 [ 445.672130][ T1042] panic+0x2cb/0x65c [ 445.676036][ T1042] ? __warn_printk+0xf3/0xf3 [ 445.680731][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 445.686474][ T1042] ? ___preempt_schedule+0x16/0x18 [ 445.691598][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 445.697758][ T1042] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 445.703915][ T1042] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 445.710069][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 445.716402][ T1042] watchdog+0x9c8/0xec0 [ 445.720579][ T1042] kthread+0x357/0x430 [ 445.724664][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 445.730219][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 445.736486][ T1042] ret_from_fork+0x3a/0x50 [ 445.742015][ T1042] Kernel Offset: disabled [ 445.746612][ T1042] Rebooting in 86400 seconds..