[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 31.988940] kauditd_printk_skb: 9 callbacks suppressed [ 31.988954] audit: type=1800 audit(1544343418.700:33): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 32.017733] audit: type=1800 audit(1544343418.720:34): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 32.359226] audit: type=1400 audit(1544343419.070:35): avc: denied { map } for pid=6112 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.434905] audit: type=1400 audit(1544343421.140:36): avc: denied { map } for pid=6127 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2018/12/09 08:17:05 fuzzer started [ 38.886496] audit: type=1400 audit(1544343425.590:37): avc: denied { map } for pid=6133 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/12/09 08:17:07 dialing manager at 10.128.0.26:41019 2018/12/09 08:17:08 syscalls: 1 2018/12/09 08:17:08 code coverage: enabled 2018/12/09 08:17:08 comparison tracing: enabled 2018/12/09 08:17:08 setuid sandbox: enabled 2018/12/09 08:17:08 namespace sandbox: enabled 2018/12/09 08:17:08 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/09 08:17:08 fault injection: enabled 2018/12/09 08:17:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/09 08:17:08 net packet injection: enabled 2018/12/09 08:17:08 net device setup: enabled 08:20:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)=ANY=[]) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sched_setattr(0x0, 0x0, 0x0) [ 221.598558] audit: type=1400 audit(1544343608.310:38): avc: denied { map } for pid=6147 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3283 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 221.679644] IPVS: ftp: loaded support on port[0] = 21 08:20:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58114347b289546465a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x1, 0x0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000200)={0x43}, 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 221.955869] IPVS: ftp: loaded support on port[0] = 21 08:20:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278) close(r0) [ 222.218123] IPVS: ftp: loaded support on port[0] = 21 08:20:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_writeback='data=writeback'}]}) [ 222.786291] IPVS: ftp: loaded support on port[0] = 21 08:20:09 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) timer_create(0x7, &(0x7f0000000cc0)={0x0, 0x3f, 0x3, @thr={0x0, 0x0}}, &(0x7f0000001100)) [ 223.203355] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.227189] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.235030] device bridge_slave_0 entered promiscuous mode [ 223.316493] IPVS: ftp: loaded support on port[0] = 21 [ 223.436741] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.447235] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.454633] device bridge_slave_1 entered promiscuous mode 08:20:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x80000000002, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001600)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000bc0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6102]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 223.610625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.778697] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.786636] IPVS: ftp: loaded support on port[0] = 21 [ 223.798022] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.817170] device bridge_slave_0 entered promiscuous mode [ 223.831986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.978696] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.985187] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.001276] device bridge_slave_1 entered promiscuous mode [ 224.158898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.226153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.291554] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.317150] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.325362] device bridge_slave_0 entered promiscuous mode [ 224.335452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.368524] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.379244] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.390580] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.404089] device bridge_slave_1 entered promiscuous mode [ 224.529867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.674646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.721828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.839826] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.854726] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.867424] device bridge_slave_0 entered promiscuous mode [ 224.884221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.005247] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.021721] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.035614] device bridge_slave_1 entered promiscuous mode [ 225.046012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.054847] team0: Port device team_slave_0 added [ 225.081897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.108134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.132650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.160781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.195607] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 225.216872] team0: Port device team_slave_1 added [ 225.272171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.284265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.306773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.317372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.333110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.463534] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.485947] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.510086] device bridge_slave_0 entered promiscuous mode [ 225.517931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.571703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.592005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.608803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.649361] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.655759] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.678531] device bridge_slave_1 entered promiscuous mode [ 225.694258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.730398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.752730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.770063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.800811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.826150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.837663] team0: Port device team_slave_0 added [ 225.846012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.926873] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.951840] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.965187] device bridge_slave_0 entered promiscuous mode [ 225.974055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.987559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.995328] team0: Port device team_slave_0 added [ 226.028179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.036051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.054533] team0: Port device team_slave_1 added [ 226.061565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.098125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.105492] team0: Port device team_slave_1 added [ 226.130202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.139826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.155307] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.169497] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.181006] device bridge_slave_1 entered promiscuous mode [ 226.202056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.245582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.260661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.303390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.328403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.369389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.381280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.397708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.407734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.440924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.459352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.470069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.487953] team0: Port device team_slave_0 added [ 226.526422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.534810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.553457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.564477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.574188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.604338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.627968] team0: Port device team_slave_1 added [ 226.634185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.651075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.680629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.697646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.705340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.728628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.744673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.757847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.790876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.817745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.827753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.853533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.883006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.923191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.938549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.948614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.989976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.051361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.070447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.088215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.096197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.195834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.208045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.227763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.239761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.247852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.316430] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.338128] team0: Port device team_slave_0 added [ 227.349275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.358688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.385905] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.392477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.399693] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.406033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.452802] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.463523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.482882] team0: Port device team_slave_1 added [ 227.602996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.728363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.803682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.816028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.841168] team0: Port device team_slave_0 added [ 227.890228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.902057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.918332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.961247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.979848] team0: Port device team_slave_1 added [ 228.038602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.045811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.054486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.097572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.113823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.125122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.168497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.176041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.214502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.288480] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.294897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.301560] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.307949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.325420] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.333449] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.339863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.346467] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.352870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.361025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.379718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.397554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.429505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.527309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.534491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.555803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.735564] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.742044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.748717] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.755056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.795409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.827758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.847908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.867438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.469278] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.475692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.482425] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.488817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.540075] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.844523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.856826] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.863285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.869943] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.876279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.885345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.857886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.389064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.866435] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.356070] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.367213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.376218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.406512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.418395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.664485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.812430] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.839185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.935042] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.155100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.298303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.306445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.318100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.362714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.403074] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.417637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.424716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.685276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.696697] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.709844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.718198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.736994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.808565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.858373] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.154127] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.219168] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.244746] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.259416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.272668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.698418] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.714309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.738058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.748604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.172013] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.623158] audit: type=1400 audit(1544343623.330:39): avc: denied { associate } for pid=6148 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 08:20:23 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003880)={'vcan0\x00', 0x0}) r2 = syz_open_dev$vcsa(&(0x7f00000018c0)='/dev/vcsa#\x00', 0x1f, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000003780)=""/65) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0x9, 0x3, 0xffff}, 0x7ff, 0x3, 0x0, 0x0, "3a9a5de6809f4a3a"}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000038c0)=ANY=[@ANYBLOB="b700000000000100bfa30000000080001703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d400300000000006506000001ed00001c040000000000006f460000000000006a0a00fe00000000850000002e000000b70000000000000095000000000000009ede4eb0eb268793eeeeb9efd11235ff92d638c36f2931f90408499492ebc13f49bf5b3647b87718a3e11bef95daf5820ff8674045116869c2066fca493c7e118aea92a69f94af7da7f8dbd9caab23af6ff9816b1c6795d11cdf6768b12cafa28308aa867c28efa8ce0dc6f86bec4dbab5b1d5f707b11f4c85e3a81d00dbab8d"], &(0x7f0000000100)="505c881c"}, 0x48) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000003cc0)={0x2000000d, @capture={0x1000, 0x0, {0x0, 0x2}, 0x3, 0x9}}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x5, &(0x7f0000001680)=""/230, 0xe6}, 0x1000}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001780)=""/94, 0x5e}, {&(0x7f0000001800)=""/175, 0xaf}, {&(0x7f00000018c0)}], 0x3, &(0x7f0000001940)=""/122, 0x7a}, 0x3}, {{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/199, 0xc7}], 0x1}, 0x7fffffff}, {{&(0x7f0000001b80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c00)=""/93, 0x5d}, {&(0x7f0000001c80)=""/180, 0xb4}, {&(0x7f0000001d40)=""/16, 0x10}, {&(0x7f0000001d80)=""/247, 0xf7}, {&(0x7f0000001e80)=""/7, 0x7}], 0x5}, 0x73}, {{&(0x7f0000001f40)=@sco, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)=""/136, 0x88}, 0x80}, {{&(0x7f00000020c0)=@ethernet, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/130, 0x82}], 0x1, &(0x7f0000002240)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000003240)=@un=@abs, 0x80, &(0x7f00000034c0)=[{&(0x7f00000032c0)=""/99, 0x63}, {&(0x7f0000003340)=""/99, 0x63}, {&(0x7f00000033c0)=""/200, 0xc8}], 0x3, &(0x7f0000003500)=""/141, 0x8d}, 0x40}], 0x7, 0x140, 0x0) [ 237.057917] audit: type=1400 audit(1544343623.770:40): avc: denied { prog_load } for pid=7600 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:20:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x48002, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) [ 237.195677] hrtimer: interrupt took 33211 ns 08:20:24 executing program 0: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) uname(&(0x7f0000000000)=""/160) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xc}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 08:20:24 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 08:20:24 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write(r0, &(0x7f0000000100)=';', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x1}}, 0x30) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0xffffffffffffffff) r4 = geteuid() r5 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000006c0)=0xe8) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) r9 = accept4$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x80000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r12 = getgid() r13 = fcntl$getown(r1, 0x9) fstat(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002340), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) sendmmsg$unix(r0, &(0x7f0000002440)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="288789a11c28b02d0a9b8cc96062ec88a6e82b4501d00b0be40fc771d6ecdf6f8f28b409cb41d8516b11e612ff6099622421bf34f9f348b2ba193684426e2393a96d9d03aff45435d227a097c81d26bc99d38a6f1a1db8b85b8a", 0x5a}, {&(0x7f00000001c0)="8ed58073aa5fb347f4c09e89c6caf8530ca6ddd1bd22efba011f3f509ddcf890e46c3857646d927fca2d0df52ed09aac1d4cdc6f14e2acb9ff897075ad463a443159086fcbbeb38bcadd510c984664f5824c8bc444ce28810507a7904a65a753e1ef898c795671c915a2979e493c93a8fb5c16463266a042f73fd1b38c675d39505577c30f0f23babad6bfc6f0e41b48b7", 0x91}, {&(0x7f0000000280)}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000002c0)="b77cddbc914e9ffa5334c4b1d1ce7294c9f4b9bd6ad359da958e8e05d1b3f0baef19ed211cd87a1b9a3f0618e69791ecec5c13f068b376b4ee4a70779d759faa82e35dc5439b974d365b4c9260c8ef3abcb0b7f67dcc58370ed64e87401fecd30b2082c0ae5a6e00830432dafb8e18e5f5a6a84031beb50973df101c8edb785e04ef3baf59dd0146cd0759e4ef16bf44dfb653a90681535f23d8e95d7362b3929f2b3e1b09", 0xa5}, {&(0x7f0000000380)="431bc857c04bb332393c368226b65f0eb5e27bbbcc5c7d8cd33b665e6108e21ac874", 0x22}, {&(0x7f00000004c0)="c28751ec9e405af5779476dfa61a5d7a5cd68619d54b60df8ea4c04a5d248f6ba1cd70c5067715b45fa1726cd1651ad0bee82a940c75bc320037a4ed0f1de877f51de2cc688d40f30c9b0ce4be1c509f26ae4d7a0fe8841d6404e28298e0ad0e37e597c620939e3fd6758a3d3f6c207abc36d3df4406876f80ba8fb711ca748f1daab3947d5033b5a698fc3fe21b567f53420e7ac456e22cc230029bc44be753dc9a1e9846c24270f533998176eee3ca2f61902313721ce2079216ec7c293fe579", 0xc1}], 0x7, &(0x7f0000001ac0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, r2]}, @rights={0x28, 0x1, 0x1, [r0, r2, r0, r0, r2]}, @rights={0x38, 0x1, 0x1, [r1, r2, r2, r1, r0, r0, r2, r2, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x38, 0x1, 0x1, [r2, r2, r1, r0, r0, r1, r2, r1, r2, r9]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r1, r2, r0, r0]}], 0x168, 0x800}, {&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001c40)="8154a0eb310393ec25f2e80b033382c1b6869dc69029c91d9a439789388668de1aea11ced9878fd47b5c1b4ded3703dbd058bb80605df4c6b4852337945ee6807384e635407eed02f6bf2cbae73e28096ecb27008faed3ffc24d198b34dc5966aeaea42d1430c1bf160181130e5cea2e0c9aa17a6e92903db51ac1bdf399fa2d329380ea0ebbcd80b96758c1709967956e815f450e7ae7e30a1f7a2eb86f1305dc02b8b1239e3cb5e60b86b91bdc6b314e2b49c84f31096b12b08906a6234b9d4c06af9e8fc168bde0a10bc7d83bff186b546736e268ffc46e9b293df1112d309d", 0xe1}, {&(0x7f0000001d40)="ece2cb2d418cb8d2c21529c33e7c50e7533b951ee154aff369d70028c1f880bd5ddbea2ee623038fcabdb32cee1c6085aa4d543313d340621aecb89f25ba681f5e70d7d75480db5daacc25a7b590744e0d45a80a90b130fb91f3bf735b8ae773912ad183e45f38b8b4e4919b260b8025185cd46d5639cea67f3e2155cc9ecdc2c4db9527dc5c6bb1d1f71ec95ce14825a402138cef7792a4268179cc359fb08ef697d176b76acbc1de3071e7c53278b245b0ea9e72b79ddff3fc3ada86603abf91cd1d48298933d4c770c353a98612b699e72726", 0xd4}, {&(0x7f0000000980)="3963182a50c854b9ca3dfe0babcecbb5e7517a78ddd7690e1188216410d1c25b508668282d178d8af8bf52106bacfd275934ed9bb0c70b5874b9e17d2380c16b5ebbccaef5fd51ea0635f2f1c91b14bf6ce0a61a24bc97133edf5af903e8c15cfe34ecb0731d4558ae27f35f18d637ef062f6c", 0x73}, {&(0x7f0000001e40)="af4a265c2011961f603b7871b9aa008530124bc95c69148ef00f913e86b47f4f2bd8a574491bd7a4a7c1682beec612efc7f7b129ac49fa603e45d1da01ffd8dc69655eeb8ef8306a73e6a4383ad539b36daf21ad34d68ee90ac57fdc2a5c4925f11f11ebea5e86fcdba25f1fc4b1e46bac67b93132b3e15d9e71851e1c", 0x7d}, {&(0x7f0000001ec0)="ad61ca6d65cddf96421468b020d771014eb426e65ba63e28d11881964e4637ea69cf275cce3cc1c68f88a9804ca7ab7157531dcc55a11d772983cbeaeefe96ae76d29872a7361a8b262bdfc948f377b280bd7b13f696632e077a873a26fefc21461a39383f5e047aa51a65902c44662b6c35a3004818daa5f388353933041cc8847c3b1726b7cdb4ff74e0175c9d98b41b833609274e5222d832fe8e9b7ce87dd61765865f7a", 0xa6}, {&(0x7f0000000a00)="e379683faf7577d0e936815e7801fba8378c26de1bb42f504ca1ff7de05ccda0a160bd92a025934489c3cec2664db045d190705de28ac928bcbc67553e67", 0x3e}, {&(0x7f0000001f80)="56739b9db7d3", 0x6}, {&(0x7f0000001fc0)="3cbd6e42e635935643b060d7f0ecd1801606a0091a2b45f0c34072d247747026a6038ca93b02f4e65fcfea33534a745828fae895b6bb763e020f1a7cd69bf7c6bf2e44f32b915167daf1336dddea0a98ceb7f313d4150977c724c884f7e936636690ef5fa3bffbf3508d9b9dfec43656623a1ce668a140dd9f6577c651db11573844eb2cd02f8c6be009091ccf3a7ebec46458e99c00440e9d61601ca9527c3c8d279264cbdb59a9ceb30c64a30c8f3d17", 0xb1}, {&(0x7f0000002080)="138d36eecb3c907a3a67dd4c577829965f28aac41f82646c0c8b0fc8907a6260c358a66b78d75138fa87ff74955e96b694bca6d0ccb8f71dd4dd6ae5e4e05986aeecbe434a1b5d67bbdb738618d06acd5750aa45dd271bece3acb3d8fa579413eaa89dbe450ac3509ee89dfb2d6000004760fd1ff1c2184e3cadd25cb59f33f61c22a62c2035089ea1026b218cff89d1a07b3a52695f58406ef6ade2b11db541cecdf0702b8bd59f1945a43cca819851b2459a2894cdce6f3158b4a3c8336f86a1b827ac1327ff9cecb3eb1db10979", 0xcf}, {&(0x7f0000002180)="23d62ce69d613020026e257405b1bb58d90cb787b47b7323574a136682cf1320cb2efc9bf80f937bebefe3c4411e8af6bb23f1c22abfe56188a233ade979d68e157015c939b2c154a0158cb57ca33c798e3bf064e98fd8422f0f10a85407544b8de09f7df319bd76c3169b4d2c4ab6089dbe2d6a51ac395813740c32337b5ee1", 0x80}], 0xa, &(0x7f0000002400)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x20, 0x80}], 0x2, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0xc0ed0000, &(0x7f0000000b80)) [ 237.743063] audit: type=1400 audit(1544343624.450:41): avc: denied { map } for pid=7680 comm="syz-executor2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=25558 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 08:20:24 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write(r0, &(0x7f0000000100)=';', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x1}}, 0x30) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0xffffffffffffffff) r4 = geteuid() r5 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000006c0)=0xe8) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) r9 = accept4$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x80000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r12 = getgid() r13 = fcntl$getown(r1, 0x9) fstat(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002340), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) sendmmsg$unix(r0, &(0x7f0000002440)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="288789a11c28b02d0a9b8cc96062ec88a6e82b4501d00b0be40fc771d6ecdf6f8f28b409cb41d8516b11e612ff6099622421bf34f9f348b2ba193684426e2393a96d9d03aff45435d227a097c81d26bc99d38a6f1a1db8b85b8a", 0x5a}, {&(0x7f00000001c0)="8ed58073aa5fb347f4c09e89c6caf8530ca6ddd1bd22efba011f3f509ddcf890e46c3857646d927fca2d0df52ed09aac1d4cdc6f14e2acb9ff897075ad463a443159086fcbbeb38bcadd510c984664f5824c8bc444ce28810507a7904a65a753e1ef898c795671c915a2979e493c93a8fb5c16463266a042f73fd1b38c675d39505577c30f0f23babad6bfc6f0e41b48b7", 0x91}, {&(0x7f0000000280)}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000002c0)="b77cddbc914e9ffa5334c4b1d1ce7294c9f4b9bd6ad359da958e8e05d1b3f0baef19ed211cd87a1b9a3f0618e69791ecec5c13f068b376b4ee4a70779d759faa82e35dc5439b974d365b4c9260c8ef3abcb0b7f67dcc58370ed64e87401fecd30b2082c0ae5a6e00830432dafb8e18e5f5a6a84031beb50973df101c8edb785e04ef3baf59dd0146cd0759e4ef16bf44dfb653a90681535f23d8e95d7362b3929f2b3e1b09", 0xa5}, {&(0x7f0000000380)="431bc857c04bb332393c368226b65f0eb5e27bbbcc5c7d8cd33b665e6108e21ac874", 0x22}, {&(0x7f00000004c0)="c28751ec9e405af5779476dfa61a5d7a5cd68619d54b60df8ea4c04a5d248f6ba1cd70c5067715b45fa1726cd1651ad0bee82a940c75bc320037a4ed0f1de877f51de2cc688d40f30c9b0ce4be1c509f26ae4d7a0fe8841d6404e28298e0ad0e37e597c620939e3fd6758a3d3f6c207abc36d3df4406876f80ba8fb711ca748f1daab3947d5033b5a698fc3fe21b567f53420e7ac456e22cc230029bc44be753dc9a1e9846c24270f533998176eee3ca2f61902313721ce2079216ec7c293fe579", 0xc1}], 0x7, &(0x7f0000001ac0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1, r2]}, @rights={0x28, 0x1, 0x1, [r0, r2, r0, r0, r2]}, @rights={0x38, 0x1, 0x1, [r1, r2, r2, r1, r0, r0, r2, r2, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x38, 0x1, 0x1, [r2, r2, r1, r0, r0, r1, r2, r1, r2, r9]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r1, r2, r0, r0]}], 0x168, 0x800}, {&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001c40)="8154a0eb310393ec25f2e80b033382c1b6869dc69029c91d9a439789388668de1aea11ced9878fd47b5c1b4ded3703dbd058bb80605df4c6b4852337945ee6807384e635407eed02f6bf2cbae73e28096ecb27008faed3ffc24d198b34dc5966aeaea42d1430c1bf160181130e5cea2e0c9aa17a6e92903db51ac1bdf399fa2d329380ea0ebbcd80b96758c1709967956e815f450e7ae7e30a1f7a2eb86f1305dc02b8b1239e3cb5e60b86b91bdc6b314e2b49c84f31096b12b08906a6234b9d4c06af9e8fc168bde0a10bc7d83bff186b546736e268ffc46e9b293df1112d309d", 0xe1}, {&(0x7f0000001d40)="ece2cb2d418cb8d2c21529c33e7c50e7533b951ee154aff369d70028c1f880bd5ddbea2ee623038fcabdb32cee1c6085aa4d543313d340621aecb89f25ba681f5e70d7d75480db5daacc25a7b590744e0d45a80a90b130fb91f3bf735b8ae773912ad183e45f38b8b4e4919b260b8025185cd46d5639cea67f3e2155cc9ecdc2c4db9527dc5c6bb1d1f71ec95ce14825a402138cef7792a4268179cc359fb08ef697d176b76acbc1de3071e7c53278b245b0ea9e72b79ddff3fc3ada86603abf91cd1d48298933d4c770c353a98612b699e72726", 0xd4}, {&(0x7f0000000980)="3963182a50c854b9ca3dfe0babcecbb5e7517a78ddd7690e1188216410d1c25b508668282d178d8af8bf52106bacfd275934ed9bb0c70b5874b9e17d2380c16b5ebbccaef5fd51ea0635f2f1c91b14bf6ce0a61a24bc97133edf5af903e8c15cfe34ecb0731d4558ae27f35f18d637ef062f6c", 0x73}, {&(0x7f0000001e40)="af4a265c2011961f603b7871b9aa008530124bc95c69148ef00f913e86b47f4f2bd8a574491bd7a4a7c1682beec612efc7f7b129ac49fa603e45d1da01ffd8dc69655eeb8ef8306a73e6a4383ad539b36daf21ad34d68ee90ac57fdc2a5c4925f11f11ebea5e86fcdba25f1fc4b1e46bac67b93132b3e15d9e71851e1c", 0x7d}, {&(0x7f0000001ec0)="ad61ca6d65cddf96421468b020d771014eb426e65ba63e28d11881964e4637ea69cf275cce3cc1c68f88a9804ca7ab7157531dcc55a11d772983cbeaeefe96ae76d29872a7361a8b262bdfc948f377b280bd7b13f696632e077a873a26fefc21461a39383f5e047aa51a65902c44662b6c35a3004818daa5f388353933041cc8847c3b1726b7cdb4ff74e0175c9d98b41b833609274e5222d832fe8e9b7ce87dd61765865f7a", 0xa6}, {&(0x7f0000000a00)="e379683faf7577d0e936815e7801fba8378c26de1bb42f504ca1ff7de05ccda0a160bd92a025934489c3cec2664db045d190705de28ac928bcbc67553e67", 0x3e}, {&(0x7f0000001f80)="56739b9db7d3", 0x6}, {&(0x7f0000001fc0)="3cbd6e42e635935643b060d7f0ecd1801606a0091a2b45f0c34072d247747026a6038ca93b02f4e65fcfea33534a745828fae895b6bb763e020f1a7cd69bf7c6bf2e44f32b915167daf1336dddea0a98ceb7f313d4150977c724c884f7e936636690ef5fa3bffbf3508d9b9dfec43656623a1ce668a140dd9f6577c651db11573844eb2cd02f8c6be009091ccf3a7ebec46458e99c00440e9d61601ca9527c3c8d279264cbdb59a9ceb30c64a30c8f3d17", 0xb1}, {&(0x7f0000002080)="138d36eecb3c907a3a67dd4c577829965f28aac41f82646c0c8b0fc8907a6260c358a66b78d75138fa87ff74955e96b694bca6d0ccb8f71dd4dd6ae5e4e05986aeecbe434a1b5d67bbdb738618d06acd5750aa45dd271bece3acb3d8fa579413eaa89dbe450ac3509ee89dfb2d6000004760fd1ff1c2184e3cadd25cb59f33f61c22a62c2035089ea1026b218cff89d1a07b3a52695f58406ef6ade2b11db541cecdf0702b8bd59f1945a43cca819851b2459a2894cdce6f3158b4a3c8336f86a1b827ac1327ff9cecb3eb1db10979", 0xcf}, {&(0x7f0000002180)="23d62ce69d613020026e257405b1bb58d90cb787b47b7323574a136682cf1320cb2efc9bf80f937bebefe3c4411e8af6bb23f1c22abfe56188a233ade979d68e157015c939b2c154a0158cb57ca33c798e3bf064e98fd8422f0f10a85407544b8de09f7df319bd76c3169b4d2c4ab6089dbe2d6a51ac395813740c32337b5ee1", 0x80}], 0xa, &(0x7f0000002400)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x20, 0x80}], 0x2, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0xc0ed0000, &(0x7f0000000b80)) [ 237.836800] gfs2: not a GFS2 filesystem [ 237.897695] gfs2: not a GFS2 filesystem 08:20:24 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = getpgrp(0x0) rt_tgsigqueueinfo(r0, r1, 0x10, &(0x7f0000000040)={0x3f, 0x4, 0xfffffffffffffff7, 0x7}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x6}, 0x1) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x62, 0x7d, 0x1, {0x0, 0x5b, 0x0, 0x3, {0x1, 0x2, 0x3}, 0x20000000, 0x3ff, 0x6a0, 0x3, 0x3, ',$&', 0x8, '!md5sum#', 0x1b, 'vboxnet0+#GPL[cgrouptrusted', 0x2, '(&'}}, 0x62) 08:20:24 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x3e, 0xfffffffffffffffc) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x100000001, 0x3, 0x400, 'queue0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000180)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) 08:20:24 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000140)=""/60) ioctl(r0, 0xc2604111, &(0x7f0000000240)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001500)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000001580)={0x8, 0x120, 0xfa00, {0x3, {0x7fffffff, 0x6, "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", 0x4e, 0x200, 0x2, 0x4, 0x9, 0xfff, 0x3ff, 0x1}, r1}}, 0x128) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1) sendmsg$rds(r0, &(0x7f00000014c0)={&(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001240)=""/54, 0x36}, &(0x7f0000001280), 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7}, &(0x7f00000012c0)=0x5, &(0x7f0000001300)=0x9, 0x10000, 0x6, 0x80000001, 0x401, 0x8, 0x200}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5}, &(0x7f0000001340)=0x6, &(0x7f0000001380)=0x4, 0x4, 0x2, 0x3, 0xbb7, 0x41, 0xf5c}}], 0xe0}, 0x84) 08:20:24 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x8, 0x0, 0x1}}, 0x14) getsockopt(r0, 0x7, 0x6, 0x0, &(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 238.114444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 238.142275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 08:20:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff4b) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x190) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000340)={{0x4, @addr=0x401}, "cf5f67e776afe85dfef31e1a697933b8fc635728480fe7796b7898e90a32b20b", 0x1}) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x1000}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000ffff0000001a010000010000007d0000000000000030ecc268d97937d2e4f14a6edff90a56c147df71a62e874f06df4529a694a61e3be36d9c0ef9dab11dbc07b648da745a4463427164eeffc6d2dd032817f82d0b85a8ef3c4f5f24c0889fa69bfa19475cb487831d070284f1ae5842244e0df0ab022b93ad0903af606e220e65717250df7258f1291f73af9384eb82e63cd7bb912456560c323d230e8701e65c1b163617eb55d0d07d97b64608d96b7a39c0e65af18be5614635d05acdac78364b60f47c316bb8d0638897e064b93f63b95a3abc70ca0e820a645b5cfb901b06558af1526eb9ab7e"], 0x18}}], 0x1, 0x0) r2 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000140)="654606f2af37e7c560169f64c7bcc46ee5f6890970c16db55eb1037327e14afc70137f734c3c84e074fbfe0c366a3f141a67d044fda957d775d98861624a869ea156f874b526524b14628c33c89e07c4dc08f705f52e6ee032d2afbc6c56c4b1ec2b9a737b4d5d56feace812b13c7da8542a5af15fd2645cc9850ba70ff6dd054df3cb2c06fd19531fa3081319") ftruncate(r2, 0x7000000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 08:20:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x200402, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000940)={0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x1, 0x1, [0x9a2, 0x0, 0x1, 0x80000000, 0x10001, 0x8, 0x9a5, 0x8]}) 08:20:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/77, 0x4d}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) getpeername$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) 08:20:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x17, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xa0d}, &(0x7f0000000040)=0x8) clone(0x0, &(0x7f00000001c0)="b081b8695f05f533daeb91671e257ca328ba2b0a99b91aa31171eed92daf9508b1a74e3ff2b3c7b34710ba2f19020e0e2e16cebf8e23a28f59980c1574cdb87ea95219dd665e1387ed6c1b0405336af703", &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000380)="f237296d5a70b10f19183a719c03eac16e19a16a7cdd442b85428663a890e4e6eff05397c5ab8a70fadbc7e2ac7d2187a36b7f95dba5d8659f09fc8872ee37490f0918a90f8c10120c3fb697dac247ed75eb04a106d6ff8eab5271a4a8f44d2b663c77013c7aa38e59a372b505267fcaf446db4dd0c6fdb7ab7140004e5f12f2177b4542d9587eff1f2ae47c6de9f9e40af16dbb93adc90d6c55882a5eaee77fb0708ec02d57cc38532454cafe23") getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000a40)={r1, 0x6b, "b71dc0c91c8837752143fe6a313d7ed06722b54365159c9e615e48ffd89899fb3a679ae87471b51ffadd6810143948f063275db552272da3dda12113ec8586f9e670f43eae9efbc1ad7d95547eb7fab756c29c6d2d55cae030f8c381376fbddb2a7d8aae83f9a45d0ed1a1"}, &(0x7f0000000100)=0x73) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0xc) write$binfmt_aout(r0, &(0x7f0000000440)={{0xcc, 0x0, 0x1, 0x369, 0x39c, 0x7, 0x3a9, 0x5}, "d2779effdf62396db3fc0455ef38f94441b8fc69ffb22835341b23e5613602f34e8a0ee6ce1104975613574bce90c3ed8790dcd65247cd24a8ec49fd2b4bb2a24fbe15df3c0c17f7c0a9347f9dabfeec80e97bf7c0", [[], [], [], [], []]}, 0x575) 08:20:27 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x8003f1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000856"], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000e000000002000000b6e161ccdd79b5486f89c7e74af68c086a5f73ac90b99cdc71f4b768eb64b41d67ccc8f1eb0f236d5f9d6078aae2d816a5aa1a5ae9aebe1d7e0cc188118f7faf5b2c1782357df624d07370f8d13ab2c619101b88d2f844486e0d100681d52521bf7bb340b6e9f19c414916e7860a414ce91fd3a6b46a96d69b61ac1191c7c751e0dd767520f1dfa9b1f94d9cc92c58485f0b133d3f55d7bd7fbfe643293b72e033e41d49394296b363f350867d4b31c16bf814a7545d8110b7395f505e4e88392e506fb1aa000000f0f108700e02826185982c0aa02e1dd487f0e600"], &(0x7f0000000000), 0xf4, 0x0, 0x1}, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000ffffffff00000000000000000000000000ffffffff0000000dc3f4413d25a84ec61fa03daf7952451ad152081c08cde9ef3cb34f7718ed630ae95e9708f6fe40742bb3853884a9d0cb1f1da873229823394561f8400e9dab0e0d1140f9527158119352dcb4348e29b96a61becb61de264c746cd9f768c4e04eac4fc1658f81b1c7b77e7a0005aed1a5ae84db0b79299abd"]) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000001c0)="6a6d40d138271d922634c4cd12a698c213aa713915db056164f53965a22febecbee61a624c8494a7e7fd870cdfc6163e6f353029edc16d64cdcf36f64df3ba54560931f9794d6f214123fdaec20a3df1dfc0641f8dfd4123b2cd2a791099aa2ac76a2c88cf5eb1195fe58fa5ed73f3b142c5562f10539b4eca7230a0adcf814fb08d835a4528b7f02b88d778bf8aa7d3fe18e85e86ab52e282f04abcb6da11173ab019c3992338f52cf2f702c23976a6d0c0706dbc5eb80be8f7796adf1256b77048f25ac3a5f143f9db0847e666a1df40f4") 08:20:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) tkill(r2, 0x35) 08:20:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) io_destroy(0x0) r2 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)="0d7009da776e29e3dd568a7e6597f9d6f271c24600ec4655f8226e52a3e04023b18f304be6c9074603474fcf0dc9fe29738ed0a9f87b88228bb5a555e9113e1610beac923b18a6b4c457e80fb9b4d0555b18f487a959c788d83228d9c029681dff3341613ddd7ad1f4fd993405296d25f95588a9250d2fe0d148b0e19704ae229824c807f94e7fcc2d", 0x89, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="2c562efdc43d1094ff318ad4f1375b1d54", 0x11, 0xfffffffffffffff8) mq_open(&(0x7f0000000080)='(\x00', 0x40, 0x0, &(0x7f00000001c0)={0x2, 0x1, 0x10001, 0x100000000, 0x1f, 0x9, 0x6, 0x66}) keyctl$dh_compute(0x17, &(0x7f0000000600)={r2, r3}, &(0x7f0000000640)=""/186, 0xba, &(0x7f00000007c0)={&(0x7f0000000780)={'sha256-generic\x00'}}) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x3000000000000000, 0xf0000000000000, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000100)={0x1, 0x3, 0x7, 0x71ab}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="9af4ba000b0411403a76681a4ce72e7ec16eb7662913b909dde4f55382d1342b034fd9228c923ef17fcf97ac22f7ff395eb35e48bcb6575d645cde165400337e6a4929ede0a410532f8696bc2876d2d91a8b2fe41329d89ab60b4d92384be821762f30e26170", @ANYRES32=0x0, @ANYRES32=0x0], 0x0) eventfd2(0x1, 0x1) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0xf8) 08:20:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x1f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmmsg$alg(r1, &(0x7f0000001f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0xfe40}], 0x1) 08:20:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) geteuid() setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x29e8, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 08:20:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') connect$llc(r0, &(0x7f00000003c0)={0x1a, 0x306, 0xa92e, 0x5, 0x5, 0x3, @dev={[], 0x11}}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000380)='./control\x00', &(0x7f0000000640)=[&(0x7f0000000440)='cpuset\x00', &(0x7f0000000540)='-[lo\x00', 0x0], &(0x7f00000008c0), 0x1900) r1 = creat(0x0, 0x0) clock_gettime(0x0, &(0x7f0000002000)) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000240)='*self-trusted:-{%proc}\x00', 0x0, 0x0], 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000280)=""/239, &(0x7f0000000180)=0xef) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200000, 0x0) faccessat(r1, 0x0, 0x40, 0x100) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x7, 0x3, @raw_data=[0xff, 0x7, 0x0, 0x2, 0x81, 0x200, 0x43, 0x0, 0x8, 0x3, 0x3, 0x854, 0xfffffffffffffffb, 0x8, 0x2a7c00000000000, 0xfb28]}) socket(0x8, 0x9, 0x5) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000008c0)={0x0, 0xff, 0x6, 0x6, 0x5b, 0x8000, 0x2, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x81, @ipv4={[], [], @loopback}, 0x2}}, 0x0, 0x0, 0x5, 0x3, 0xc5}}, &(0x7f0000000980)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)={r3, 0x8, 0x7, [0x7, 0x2, 0x7, 0x6, 0x1000, 0x7, 0x20]}, &(0x7f0000000a00)=0x16) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f00000001c0)={{}, 'syz*\x00', 0x4c}) preadv(r0, 0x0, 0x0, 0x0) 08:20:27 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000006c0)=[0x0, 0xee01, 0xee00]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) setgroups(0x9, &(0x7f0000000780)=[r1, r2, r3, r4, r5, r6, r7, r8, r9]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x357d, 0xe0, &(0x7f00000001c0)=""/224, 0x0, 0x0, [], 0x0, 0xf}, 0x48) [ 240.508960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.571735] input: syz1 as /devices/virtual/input/input7 08:20:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x5}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) read(r0, 0x0, 0x0) 08:20:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xb6d, 0x4) 08:20:27 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) socket$inet(0x2, 0x3, 0x80) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000001c0)={'rose0\x00'}) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@ipx, &(0x7f0000000000)=0xfffffffffffffdf5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000440)={0xbf0000, 0x200, 0x4, [], &(0x7f0000000340)={0xa2093d, 0x3ff, [], @p_u8=&(0x7f0000000300)=0x100000000}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002000)={@mcast2, 0x40000000000000, r4}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r5 = open(&(0x7f0000028000)='./control\x00', 0x10, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000200)) getsockname$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x220}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) connect$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x2, @local}}, 0x1e) mknodat(r5, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000003c0)='./control\x00', r5, &(0x7f0000000400)='./file0\x00', 0x2) 08:20:27 executing program 5: r0 = socket(0x18, 0x0, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x600102, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f0000000680), 0xfffffffffffffffe) 08:20:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x7fffdf308000, 0xffff8000}) 08:20:27 executing program 5: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffc, 0x0) mount(&(0x7f0000000240), &(0x7f0000000200)='.', 0x0, 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 08:20:29 executing program 4: r0 = socket$inet6(0xa, 0x40000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f0000006e00)) 08:20:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227c, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x101}) 08:20:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1ff}, {0x80}, 0x0, 0x20}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0xcc75, 0x5}, 0x2) 08:20:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x3f, &(0x7f0000ffb000/0x3000)=nil, 0x2) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet(0x2, 0x80003, 0x200000007f) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/127, 0x7f}], 0x1, &(0x7f00000001c0)=""/217, 0xd9}, 0x9}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)}], 0x5, &(0x7f0000000700)=""/74, 0x4a}, 0x4}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/74, 0x4a}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/220, 0xdc}], 0x6}, 0x9}, {{&(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c80)=""/171, 0xab}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/30, 0x1e}, {&(0x7f0000000e80)=""/218, 0xda}, {&(0x7f0000000f80)=""/121, 0x79}, {&(0x7f0000001000)=""/186, 0xba}, {&(0x7f00000010c0)=""/41, 0x29}], 0x7, &(0x7f0000001180)=""/122, 0x7a}, 0xfffffffffffffff8}, {{&(0x7f0000001200)=@pptp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/42, 0x2a}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002540)=""/175, 0xaf}, 0xe5}, {{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002600)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003600)=@l2, 0x80, &(0x7f0000005b80)=[{&(0x7f0000003680)=""/157, 0x9d}, {&(0x7f0000003740)=""/218, 0xda}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/173, 0xad}, {&(0x7f0000004900)=""/149, 0x95}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/204, 0xcc}, {&(0x7f0000005ac0)=""/172, 0xac}], 0x8, &(0x7f0000005c00)=""/190, 0xbe}, 0x28a33e06}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005cc0)=""/220, 0xdc}, {&(0x7f0000005dc0)=""/140, 0x8c}, {&(0x7f0000005e80)=""/146, 0x92}], 0x3, &(0x7f0000005f80)=""/153, 0x99}}], 0x8, 0x100, &(0x7f0000006280)={r3, r4+10000000}) ioctl$sock_bt(r1, 0x541b, 0x0) 08:20:29 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x12701, 0x0) syncfs(r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$netlink(0x10, 0x3, 0x20000000004) read(r2, &(0x7f0000000440)=""/4096, 0x1000) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140019b469a81014aed182f30284470080ffe0060000000000050000005603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2f, 'cpu'}, {0x2d, 'io'}]}, 0x21) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001440)={0x100000000000000, {{0xa, 0x4e24, 0x100000001, @dev={0xfe, 0x80, [], 0x1d}, 0x1}}, 0x1, 0x6, [{{0xa, 0x4e24, 0x100000000, @mcast1, 0xfff}}, {{0xa, 0x4e21, 0x3ff, @ipv4={[], [], @local}, 0x7a}}, {{0xa, 0x4e21, 0x5, @mcast2}}, {{0xa, 0x4e20, 0x1, @remote, 0x180000000000}}, {{0xa, 0x4e20, 0x20, @local, 0x3ff}}, {{0xa, 0x4e28, 0xffffffffffff8000, @local, 0xfffffffffffffff8}}]}, 0x390) 08:20:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) socket$inet(0x2, 0x3, 0x80) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000001c0)={'rose0\x00'}) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@ipx, &(0x7f0000000000)=0xfffffffffffffdf5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000440)={0xbf0000, 0x200, 0x4, [], &(0x7f0000000340)={0xa2093d, 0x3ff, [], @p_u8=&(0x7f0000000300)=0x100000000}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002000)={@mcast2, 0x40000000000000, r4}) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r5 = open(&(0x7f0000028000)='./control\x00', 0x10, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000200)) getsockname$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x220}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) connect$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x2, @local}}, 0x1e) mknodat(r5, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000003c0)='./control\x00', r5, &(0x7f0000000400)='./file0\x00', 0x2) 08:20:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x1e}, 0xd481}}, 0x5b, 0xfa6}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x2) timer_create(0x2, &(0x7f0000000300)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000540)="117604eb619fe4a69e6be26eff440232b9a4e0e0807ed59f63512a72f849f822785f3b4f7fb6f98f31426bb0f34f3bc03c4174d2127e9b52ca12722d76e43442bd5f82d523b1b8723120904c31d8e5b2a0a4a99ee11276ee56", &(0x7f0000000640)="8a88e548c32f5a1ee32739a23cc8dbf16502c573aaf9fc741d7b4921fbe4592ee1d10bd12e8cc316f48372395d24955c3ea7ffff3374b0b7c995fb514e66dcd08d7a614bdb14eaec3da83e69c24b41cb614fdd40d26af69895d456e6e81e3ee396959fcafac96aea715afe6e6c19fabab9a1bd9d08666ed1288daf4994ba5970c668e3c51bc79b7f8c18c3f60c66da13ce6295414e731b6c3612faebb20a0027c1beeb78a2b38d5dca54f40ea10b76a37523c9246ae42cdf2c2196c9ee6c916d536208b26956bfd0ab5a4d0b09a082db042d8b059b60f0c5ed5da82207cfd28e93799bc0f357ee638f480ba2227d2be2911d6028f7f0ee7dbb"}}, &(0x7f00000005c0)=0x0) timer_delete(r4) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a31c6c016aebfd9d96ca788488313f95e5f4ce358e3aa85fa51a830c36e923b2d13d18ba32a2083b216929b05920c00dcf33c0974997b087d40936c601e8d756366b50e537e1c86857789b148b264ff46875cbc0f4179c7572f59e17f191d8a05c73ce9e01efd2e4a4f67469d55264ce83e254200cbb8652f47c12c750cd8f8a9f48ecdde84a2df972fa86e052cdad4d34ce97e29db51c31e900c1643b5ae78c240235ff647d6cdceeb618c8b12bb3a6535f8370f35faa04cc8ea35d3a486c42a258035a08f1b198da27c37958ab15cfed97dbbf12fee6c000000000000"], 0xea) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0x11}, &(0x7f0000000180)=0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000380)={0x5, 0x6, 0x6, 'queue0\x00', 0x6}) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='lockprotcktXble=/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) [ 242.479655] audit: type=1400 audit(1544343629.190:42): avc: denied { map } for pid=7856 comm="syz-executor4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26785 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 08:20:29 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80000) gettid() lstat(0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x15000, 0x0, 0x0}]}) bind(r1, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'], 0x1) 08:20:29 executing program 4: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600"], 0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x8, 0x7, 0x3, {0x9, @win={{0x4, 0x2, 0xcd, 0x1}, 0x0, 0xb, &(0x7f00000000c0)={{0x80000000, 0x7f, 0x4, 0x3970}, &(0x7f0000000080)={{0x42f2, 0x0, 0x6, 0x8}}}, 0x1, &(0x7f0000000200)="ea706bbb6f1e39f124956fd1739e0a85e4bee742065dc638344c34117f31ef3a8e4700af3bb93f2a04ac741df6f5731d88eb8698a7c81b86e53495d33c0d1f669509ee63083425949e73932843ebe9aae93dcff2e767be42d4ff06ce14abbf898459be84c9af737a65aae3e8a2d7221e45691fef12c53b14f9573ce0c71167bd1dce5f9961b39e9e59e62cf15076efeeee51e329c03a0cfb4d5339817c972ed40c7cd936e5ff44b99b2e8ee836f248f259b6f8929a278659a3e60397fda68f898d2f9d16352e8eb978dc30303067188cd6755681", 0x7f}}}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10) 08:20:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000000)="0a5c2d024031f437717070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', 'vcan0\x00'}, &(0x7f00000000c0)=""/137, 0x89) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000001c0)={0xd8a, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) write(r1, &(0x7f0000000400)="c4e1f64e08c456a36447bc9e5c17326a", 0x10) [ 242.605809] gfs2: invalid mount option: lockprotcktXble=/ [ 242.632732] gfs2: can't parse mount arguments 08:20:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc04c5349, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r1, 0x6, &(0x7f0000000240)=0xe6, &(0x7f00000002c0)=0x7) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 08:20:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000300)={0x7ff, 0x1, 0x6, 0x3b, 0x4, 0x1f, 0x0, 0xff, 0x0, 0x1ff}) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYRES64], 0xffffff76) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x8040) write$FUSE_WRITE(r4, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x7}}, 0x18) fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x100000000000003) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x20840, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00') setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req={0xfffffffffffffeff, 0x78, 0x3, 0x7ab}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) dup3(r2, r3, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) 08:20:29 executing program 2: keyctl$dh_compute(0x19, &(0x7f0000000140), &(0x7f0000000080)=""/107, 0x6b, 0x0) pipe2(&(0x7f0000000000), 0x84000) 08:20:29 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x20000000000) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)) r2 = dup3(r0, r1, 0x0) getegid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) close(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x100000000, 0x1, 0x7, 0x31c, 0x0, 0x8, 0xd1205, 0x8, 0x128, 0x1, 0x100000001, 0x9, 0x6, 0x5, 0x80000000, 0x80, 0x40, 0x9, 0x401, 0x63f, 0xfffffffffffffffd, 0x3, 0x1, 0x3, 0x76, 0x8000, 0x7fff, 0x5, 0x100000000, 0x2, 0x10001, 0x4, 0x3f, 0x9, 0x6, 0xb0b, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x10000, 0x5, 0x0, 0x7, 0x597, 0x6, 0x800}, r3, 0xb, r2, 0x2) ioctl(0xffffffffffffffff, 0x88912, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@md5={0x1, "0730ecce1c65bfed0bee5572a83e75fe"}, 0x11, 0x3) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000400)=r3) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e24, 0x0, @loopback}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x5c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x72c22b283cdc54d7, 0x10, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getgroups(0x0, 0x0) getresgid(0x0, 0x0, &(0x7f00000007c0)=0x0) getgroups(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgroups(0x3, &(0x7f0000000340)=[r5, r5, r5]) 08:20:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff7000/0x8000)=nil, 0x8000}, &(0x7f0000000140)=0x10) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgid(0x0) tgkill(r2, r3, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0xfffffffffffffcda) [ 242.926320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 242.956772] audit: type=1400 audit(1544343629.660:43): avc: denied { map } for pid=7915 comm="syz-executor3" path="socket:[26460]" dev="sockfs" ino=26460 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 08:20:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000014c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001580)=ANY=[@ANYBLOB="06000000df80bebf0a8c17de5ca831cfc3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001540)={r2, 0x5, 0x4, [0x2, 0x370, 0x200, 0x0]}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000200)=0x8) ioctl(0xffffffffffffffff, 0x800000000008982, &(0x7f0000000080)) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x10000, r3, 0x0, 0x0, 0x8, 0x0, 0x1}, &(0x7f0000000040)) r5 = openat$cgroup_int(r0, &(0x7f0000000340)="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", 0x2, 0x0) r6 = openat$cgroup_ro(r0, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) 08:20:30 executing program 2: r0 = semget(0x0, 0x6, 0x500) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = semget(0x0, 0x7, 0x60) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000040)=""/50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8982, &(0x7f0000000000)={r1}) 08:20:30 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x80500) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1b, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="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") ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x9, 0x9f84, 0x1, 0x1, 0x1, 0x9, 0xffffffff, 0x0, 0x2, 0x4b, 0x7, 0xfffffffffffffeff, 0x7fff, 0x298a, 0x1b, 0x32}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000500)={0x8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {}]}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000540)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0xffff, 0x400, 0x1, 0x31ac1c79}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000000c0)) 08:20:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x400000007f, 0xfffffffffffffffe) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x1f, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x56, 0x0, 0x7f8000, 0x23, 0x2, 0x20, 0x7f, 0x0, 0x20000, 0x3e000000000, 0xfffffffffffff001, 0x1, 0x0, 0x8, 0x400, 0x0, 0x0, 0x8, 0x10001, 0x0, 0xa20a, 0xba, 0x81, 0xe482, 0xa6, 0xe68c, 0x3f, 0x1ff, 0x3, 0x2, 0x3, 0x3f, 0x6, 0x0, 0x8, 0x800004, @perf_bp={&(0x7f0000000340)}, 0x88, 0x3f, 0xffffffff, 0x0, 0x0, 0x6}, 0x0, 0x10, r1, 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000300)={0x1, 0x401, 0x0, 0x8, 0x7fff, 0x4, 0x3, 0x0, 0x6000000000, 0x100000000}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000cd1000/0x14000)=nil, &(0x7f00004d8000/0x3000)=nil, 0x14000, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x7}}, 0x20) sendto(r0, &(0x7f00000001c0)="7f32eaaeee24761387bcdf7323bdac7dc808e20189ad60f1d439ac5c14a4977166695db91ef4e564c98712ca8079a4d2bfa2b2be1f7be0d7c8b8", 0x3a, 0x4, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x4}}, 0x80) [ 243.388054] audit: type=1400 audit(1544343630.090:44): avc: denied { map } for pid=7934 comm="syz-executor1" path="/dev/nullb0" dev="devtmpfs" ino=3436 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 243.436547] mmap: syz-executor5 (7947) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:20:30 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80000) gettid() lstat(0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x15000, 0x0, 0x0}]}) bind(r1, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'], 0x1) 08:20:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stack\x00') ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000001c0)=0x7ff) pread64(r0, 0x0, 0x12e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x800, 0x1, 0x2d48, 0x100000000, 0x0, 0x8001, 0xd, 0xfffffffffffffff7, 0x6, 0x0, 0x7fffffff, 0x9, 0x87ac0, 0x1f, 0x5, 0x1ff], 0x0, 0x890}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r6 = dup3(0xffffffffffffffff, r3, 0x80000) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x22000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000004c0)={r6, 0x0, 0x2, r7}) chown(&(0x7f00000003c0)='./file0/file0\x00', r4, r5) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="5c6b0001040000000000000002080000", @ANYRES32=0x0, @ANYBLOB="040007000000000010000200000000002000005d73000000"], 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) r8 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000380)=[@sack_perm, @window={0x3, 0x2000000000000, 0x3}, @window={0x3, 0x1, 0x40}, @window={0x3, 0x806, 0x95}], 0x4) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000c00)=0x2) r9 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x84, 0xc802) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) 08:20:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$bt_bnep(0x1f, 0x3, 0x4) 08:20:30 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) 08:20:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="736d617073009223300ed429bc1629a3904cd7e9657f7896bc35503edb6b07b4a8956e59bea345efc705e61e5f77f53a36137a6d9b8600000000000000000000000000000000000000000000000000000000000000") ioctl$void(r0, 0x5450) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 08:20:30 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x200081) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)={r2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x10001) mmap(&(0x7f0000a43000/0x1000)=nil, 0x1000, 0x80000000803, 0x2031, r3, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000840)="9822a52094306e8713065bde7817f7b3c7eb358f83d74b2349da67b9918c233bd96a32af05bd0657869b85bec75df10def1408bd257d208079e4690fb6b5b93fc728ec9f905fb202e20a9ca0d17da579226ee4f6cd273ee50fa5899175d4e3c6d0df53a855dd5ae539ce711fb2971eae49e79047565df35a56d2bd15511284e8d683ec87f4ff4bada6dad55f8464d0da43864522016f", 0x96}, {&(0x7f0000000200)="c769329481710009", 0x8}], 0x2) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x1200000000114, 0x2716, 0xffffffffffffffff, &(0x7f0000000240)=0xfffffffffffffebb) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x3, 0x5b8, [0x0, 0x20000280, 0x200002b0, 0x20000458], 0x0, &(0x7f0000000000), &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0x639) mlock(&(0x7f0000046000/0x1000)=nil, 0x1000) 08:20:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x66642a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xb74315beeca3334b, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x3, 'gretap0\x00', 0x4}, 0x18) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0xffff) [ 243.926886] binder: 7973:7974 transaction failed 29189/-22, size 24-8 line 2834 [ 243.956116] binder: 7973:7974 transaction failed 29189/-22, size 24-8 line 2834 08:20:30 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35a1672af30bf5d0b1aea5fdaade62aafc2c12e39e", 0x3c}], 0x1}, 0x0) [ 243.985063] binder: undelivered TRANSACTION_ERROR: 29189 [ 243.994402] binder: undelivered TRANSACTION_ERROR: 29189 08:20:31 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x10, 0x2, 0x300, 0x70bd2a, 0x25dfdbfc, {0xf, 0x0, 0x8}, [@typed={0x14, 0x10, @ipv6=@mcast1}, @typed={0x8, 0x58, @u32=0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x5, 0x14}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0xe41, [], @bt={0x200, 0x0, 0x80, 0xfffffffffffffff7, 0x9, 0x7fffffff, 0x8, 0x7}}) 08:20:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2e0281, 0x0) recvfrom$inet6(r3, &(0x7f00000003c0), 0x0, 0x40, &(0x7f0000000400)={0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x100000183) 08:20:31 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x0, 0x2, 0x9}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 08:20:31 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r0, 0x0, r3, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001440), 0x1000) read$FUSE(r2, &(0x7f0000000440), 0xffffff6b) pipe(&(0x7f0000000080)) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) write$selinux_attr(r1, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0xfffffffffffff695, 0x3, 0x7fffffff, 0x400, 0x8000, 0xffff, 0x3, 0x44351002]}) [ 244.745196] syz-executor1 (7937) used greatest stack depth: 14888 bytes left 08:20:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140), 0x7) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast2, 0xfffffffffffffffd}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xe}, 0x20) 08:20:31 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000080), 0x100000000000013c, 0xfffffffffffffefd) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 244.808486] binder: BC_ATTEMPT_ACQUIRE not supported [ 244.828116] binder: 7998:7999 ioctl c0306201 200002c0 returned -22 08:20:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) listen(r0, 0x38) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = accept4(r0, &(0x7f0000000080)=@rc, &(0x7f0000000200)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x61, "63ead66dab44136062a8ea1fa5ed5499e225f9d72d0f93255b9c4c2977c09db625d22ee7607f5ab6a66d36f9040b3d036b0547759c579b172291fa1ca2d0fc0b1ffe0c7043e0a9ddefc9c3c908fdb7fcc6c7714e874976cf1d77d9a90fd6177835"}, &(0x7f0000000180)=0x69) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x3}}, [0x80000000, 0x8, 0x84, 0x1, 0x40, 0x6, 0x0, 0x8ae, 0x19, 0x5, 0x800, 0x3ff, 0x2, 0x9, 0x6]}, &(0x7f00000001c0)=0x100) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="fd"], 0x1}}, 0x4008000) sendto$inet6(r0, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x1, @loopback}, 0x12) 08:20:31 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00148700fe8000000000000000000000000000aafe8000000000000000000000000000aa3b000000", @ANYRES32=0x41424344, @ANYRESHEX, @ANYBLOB="3a86128b1dedd74d"], &(0x7f00000002c0)) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) 08:20:31 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x20000000001b) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/197) 08:20:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r2 = msgget(0x2, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000580)=""/68) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00012cbd7000fbdbdf250d00000014000200080008000200000008000700020000001c0001000800010000000000080001000a00000008000400000000000c00020008000300000000000800050009000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) socket(0xa, 0x80005, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000640)={0xa, 0x4}, 0xc) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488d") ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={"7465616d30000000000200000500"}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'bridge_slave_0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x56, "ba7b882abe131a388749ed6e031023f2fc75e3de0f417264762c89b733ae08396fa5001d30825dead3e5d457cfe678516969bb4ea02c7be72cda430b0d0a4d221436b5da7efd51501bf93a4b6deede5d859a98d019f5"}}) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8, 0x0, 0xf401000000000000]}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={'\x00', {0x2, 0x0, @remote}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x7, &(0x7f0000000440)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000740)={0x0, 0x0, 0x10002, 0x400000000000}) 08:20:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a04000000316285717070") recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/59, 0x3b}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0) 08:20:31 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f4, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) connect(r1, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x1, 0x3}}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x20000802, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x10, &(0x7f0000000080)={@mcast1}, 0x20) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x8f2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x8, 0x4000000000000, 0x7ff}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) sendto$inet(r3, &(0x7f0000d7cfcb), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x5, 0x3, 0x1f}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x400000000000001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000400)={{0x3, 0x0, 0x8, 0x3, 0x21}, 0x0, 0x3ff, 0xffdfffffffffff80}) r6 = gettid() capset(&(0x7f0000000340)={0x20080522, r6}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0xa56, 0x6, 0x6, 0x3f, 0x0, 0xffffffffffffffff, 0x2, 0xc, 0x0, 0x4, 0x1, 0xf4, 0xaa, 0x40, 0x7fff, 0x9fcf, 0x3f, 0x7f, 0x3ff, 0x7fffffff, 0x26606c49, 0x5, 0x8, 0x6c, 0x6, 0x5, 0x0, 0x438, 0x20, 0xf, 0x8000, 0x4, 0xffffffff, 0x7b6b, 0x200, 0x9, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x10000, 0x3, 0x93ac, 0x7, 0x4, 0xa78, 0xc831}, r6, 0x10, r0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) [ 245.174784] audit: type=1400 audit(1544343631.870:45): avc: denied { create } for pid=8030 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:20:32 executing program 5: clock_gettime(0x7, &(0x7f0000000080)) [ 245.287975] audit: type=1400 audit(1544343631.880:46): avc: denied { write } for pid=8030 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 245.389441] audit: type=1400 audit(1544343631.910:47): avc: denied { read } for pid=8030 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:20:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) dup2(r2, r0) 08:20:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80140, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f63677215f7eb2d726f757000", 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x2000000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)) 08:20:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r2 = getegid() write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x5, {0x1, 0x2, 0x80, 0xd0a2, 0x1, 0x1, {0x4, 0xff, 0x30b, 0x874, 0x3, 0x0, 0xb87, 0x8e, 0x7f, 0x0, 0xb6, r1, r2, 0xffffffffffffffff, 0x4}}}, 0x90) mbind(&(0x7f000097f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x7) 08:20:32 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r0, 0x0, r3, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001440), 0x1000) read$FUSE(r2, &(0x7f0000000440), 0xffffff6b) pipe(&(0x7f0000000080)) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) write$selinux_attr(r1, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0xfffffffffffff695, 0x3, 0x7fffffff, 0x400, 0x8000, 0xffff, 0x3, 0x44351002]}) 08:20:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 08:20:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x400, 0x301000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000300)) 08:20:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x7ff, 0x8, 0x659e5ebe}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000340)={0x79, 0x600000000000000, [0x11, 0x0, 0x1b], [0xc2]}) 08:20:32 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000570000000000000000000001020000000002000000000000fb322dffffffffff1556dd8b00000000000000000000000001000000000000b8b3006c1c73ddfd94b5ba"]) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) ftruncate(r3, 0x2007fff) write$P9_RCREATE(r3, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x1, 0x3, 0x5}, 0x9}}, 0x18) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000340)) sched_setscheduler(0x0, 0x7, &(0x7f0000000480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) socket$nl_generic(0x10, 0x3, 0x10) [ 245.909604] audit: type=1400 audit(1544343632.610:48): avc: denied { create } for pid=8088 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:20:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x40c1, 0x800000000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x1000d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x60) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000140)={0x0, 0xd000, 0x7, 0x0, 0x1}) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0xc0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x98, 0x7ff, {"2bf88e2630cbc75ec93932b6c42167e299a619e07e54c14d11208f1ee2750b55bb6de71fe21cf57035d788fa7bc80ab4f44cbeefa5b6de10b03f7dfd62d39b2343912ef7ff8ca1c7419b748196a8d98c53e91d39d5613a868eeeb20d94a36cbf72c0bd69984304da1137401c8dc8e76407ccee391466ab7d20528d222b9d"}}}, &(0x7f00000005c0)=""/209, 0x9a, 0xd1}, 0x20) ioctl$FICLONE(r3, 0x40049409, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cgroup\x00') accept$packet(r5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000980)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'ip6gre0\x00', 0x0}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000ac0)=""/145) setsockopt$inet6_int(r3, 0x29, 0x59, &(0x7f00000009c0)=0x800000000000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={"6272506467655f736c6176f85f3100", r6}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xea, &(0x7f0000000200)=""/234, 0x41100, 0x1, [], r7, 0x3}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000006c0)=""/236, &(0x7f00000007c0)=0xec) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x0) [ 246.057224] audit: type=1804 audit(1544343632.760:49): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/12/file0" dev="sda1" ino=16596 res=1 08:20:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 246.158969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.175713] syz-executor0 (8069) used greatest stack depth: 14184 bytes left [ 246.182146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:20:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:33 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x7, "88cf0cdb4cc9b52856c23a69f03735f800b5900552e7a6bd10aa44e2ed3229ad", 0x3, 0x1}) fgetxattr(r1, &(0x7f00000000c0)=@random={'osx.', '[\x00'}, &(0x7f0000000100)=""/71, 0x47) 08:20:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6], 0x227) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, r2, 0x2}, 0xc) [ 246.426599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:20:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bde, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000600), 0x8}, 0x80}, 0x0, 0xffffffffffffffff, r0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x6, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) r7 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000640)=0x10010001, 0xffffffffffffff53) r8 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r5, r5, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r6, 0x800000000008982, &(0x7f0000000080)) signalfd4(r7, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x7fd, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r10 = socket(0x10, 0x1, 0x0) ioctl(r10, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 08:20:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x2, 0x0, 0x65, &(0x7f0000000000)="17745e212b4133044433cfe318a8e36954154d632fa253b6000000000000000000040000000000000000e84a3c187ffe04bbf8589bc705e409289a19878bfd474d4dd52d01a8f694b110a908f90ce3d93d027ab5b0aba965d6471808e34e6b8d6ce306cce2"}) 08:20:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:33 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) prctl$PR_SET_UNALIGN(0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:20:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:34 executing program 5: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'ip6gretap0\x00', {0x2, 0x4e21, @remote}}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x48004, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x1ff, @empty, 0x1}, 0x1c) r2 = dup(r1) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5, 0x10000, &(0x7f0000000000)=0x2}) close(r1) [ 247.351561] audit: type=1804 audit(1544343634.060:50): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/12/file0" dev="sda1" ino=16596 res=1 08:20:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000008c00000000000000080001007366710048000200000003000000000000000000000000000000000000000000000000005b1d0000002000000000000000000000000000000000000000000000000000000000000000000000bbd01b84f7f610a254b75fa3cefaeacc24f4917bb401ec82f409f6ffaf157d55ebfd40ebfd5556d569846b5f12a8a38a5329b8f361d92d472014b566e052cb8a0fc68881243aa9187c1cb30bf567697a8d1002db35d3ee690fddbc371dd57e965eb1bd208924ce2af0372a0731c72901d9199f354af47ce3dc403eace39059ff9100e1cf2fcbbc2242463a34d6cfe9d1"], 0x1}}, 0x0) [ 247.600678] syz-executor4 (8106) used greatest stack depth: 11656 bytes left 08:20:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4002, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:20:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x4, 0x6000) r2 = msgget(0xffffffffffffffff, 0x2a0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(r2, 0xb, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x7fffffff}, 0x8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000008c0)={0x9, {{0x2, 0x4e22, @empty}}, 0x1, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000880)={0x1}, 0x4) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 08:20:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:34 executing program 1: socketpair(0x9, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r0, &(0x7f00000000c0)=@profile={'permprofile ', '\x00'}, 0xd) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x5, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000), 0x4) 08:20:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r1, r3, 0x0, 0x80040006) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1004000000016) 08:20:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:34 executing program 4: mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x5) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x0, 0x6, 0x7, 0x80000001, 0x0, 0x2703}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000600)={0x3, 0xc3c3305eef40bfe3, 0xb5, 0x2}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200000, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:20:34 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}, 0x8800) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x154, &(0x7f00000003c0), 0x18, &(0x7f0000002880)}, 0x7fffde22) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) 08:20:34 executing program 5: syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c344ee9dc01497f542f542b0796e0266420fe2e33edb116114f241d1e7d3196f") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r0) futex(&(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c9c380}, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000001900)={0x53, 0x7d, 0x0, {{0x0, 0x3e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '@', 0x9, 'cpu.stat\x00', 0x1, '.'}}}, 0x53) 08:20:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000080)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'}) 08:20:34 executing program 5: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x1000) clock_settime(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x3a) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 08:20:34 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@empty, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, @loopback, @remote, 0x0, 0x0, 0x9}) 08:20:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:37 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) 08:20:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x21, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 08:20:37 executing program 5: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x1000) clock_settime(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x3a) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 08:20:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x8, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 08:20:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:37 executing program 3: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, 0x0) clock_settime(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, r2, 0xc, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x60e5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x3a) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 08:20:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x7}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x844, 0x0, 0x0) socketpair(0x2, 0x4, 0xffffffffffff15bc, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000700)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getsockopt$packet_int(r3, 0x107, 0x6, &(0x7f0000000280), 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, 0x0) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffde0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffd74, 0x0, 0x0, 0x0) 08:20:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:37 executing program 5: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x1000) clock_settime(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x3a) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 08:20:38 executing program 1: 08:20:38 executing program 3: 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 1: 08:20:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x7}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x844, 0x0, 0x0) socketpair(0x2, 0x4, 0xffffffffffff15bc, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000700)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getsockopt$packet_int(r3, 0x107, 0x6, &(0x7f0000000280), 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, 0x0) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffde0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffd74, 0x0, 0x0, 0x0) 08:20:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:38 executing program 3: 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 3: 08:20:38 executing program 5: 08:20:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:38 executing program 1: 08:20:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x7}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x844, 0x0, 0x0) socketpair(0x2, 0x4, 0xffffffffffff15bc, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000700)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getsockopt$packet_int(r3, 0x107, 0x6, &(0x7f0000000280), 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, 0x0) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffde0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffd74, 0x0, 0x0, 0x0) 08:20:38 executing program 3: 08:20:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 1: 08:20:38 executing program 5: 08:20:38 executing program 3: 08:20:38 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x7}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x844, 0x0, 0x0) socketpair(0x2, 0x4, 0xffffffffffff15bc, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000700)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) getsockopt$packet_int(r3, 0x107, 0x6, &(0x7f0000000280), 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, 0x0) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffde0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffd74, 0x0, 0x0, 0x0) 08:20:38 executing program 1: 08:20:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:38 executing program 5: 08:20:38 executing program 3: 08:20:38 executing program 1: 08:20:38 executing program 5: 08:20:38 executing program 4: 08:20:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:39 executing program 3: 08:20:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:39 executing program 1: 08:20:39 executing program 5: 08:20:39 executing program 3: 08:20:39 executing program 4: 08:20:39 executing program 5: 08:20:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:39 executing program 1: 08:20:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:39 executing program 4: 08:20:39 executing program 3: 08:20:39 executing program 5: 08:20:39 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:39 executing program 4: 08:20:39 executing program 1: 08:20:39 executing program 5: 08:20:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:39 executing program 4: 08:20:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 08:20:39 executing program 3: 08:20:39 executing program 1: 08:20:39 executing program 5: 08:20:39 executing program 1: 08:20:39 executing program 3: 08:20:39 executing program 4: 08:20:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:39 executing program 5: 08:20:39 executing program 3: 08:20:39 executing program 1: 08:20:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 08:20:39 executing program 4: 08:20:39 executing program 5: 08:20:39 executing program 3: 08:20:39 executing program 1: 08:20:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 4: 08:20:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 08:20:40 executing program 1: 08:20:40 executing program 3: 08:20:40 executing program 5: 08:20:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x710000) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) 08:20:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0x200000000002) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 08:20:40 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000280)={'system_u:object_r:dpkg_var_lib_t:s0', 0x20, 'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, 0x0, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r2, 0x0) 08:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02a90a6285717070") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r1, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) 08:20:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 08:20:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x4, 0x6000) r2 = msgget(0xffffffffffffffff, 0x2a0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(r2, 0xb, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x7fffffff}, 0x8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000008c0)={0x9, {{0x2, 0x4e22, @empty}}, 0x1, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000880)={0x1}, 0x4) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 08:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="dc03bf88b00c430916378945b8e0c6617811ffa8869e95c2bdd612af723d88f71355d7c621e8bdc4f5e25d4658e12b09336132d0fa1f62448752637257520556686ffbf59a4121c09d05d4691b8541c360d6a79eaac38c651ad77d8d0c4bceb545aecb529409839263f511ba470f36f775516733e9bb521767f1138cbe6f7a738833cc2d6991ac4352b3e2b897cb5b03e8f9d3734f7cb7ce60ee8cc2f137b5eed3cdd703ea3f34b3cd00b17777990e", 0xaf) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0xb, 0x2, 0x1, {0x81, 0x8, 0x8, 0x550}}) ioctl$FS_IOC_GETFLAGS(r0, 0xc0045540, &(0x7f0000000080)) 08:20:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000020000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x101000) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)="62621067", 0x4) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x80400) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000080)={0x9, 0x6}) 08:20:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:40 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000380)=""/208, 0xd0}], 0x3}, 0x3}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/129, 0x81}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/145, 0x91}], 0x5, &(0x7f00000008c0)=""/232, 0xe8}, 0x2}], 0x2, 0x1000000000000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x40) preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 08:20:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x0, 0x4, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x1cd, [], [0xffffffff00000001, 0x5, 0x0, 0x9]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400200, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x2200) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="4a0000006fe8ff050010feffffff2c3d0107000000000000009fd5309b5a2c01000080000000000400000006000000000063d1d054c0b61a00000000000000001dfec68171bd863a8fdf8d4b498f045c00000000000000000000"], 0x4a) finit_module(r1, &(0x7f0000000080)='/dev/midi#\x00', 0x1) 08:20:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x9, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0405519, 0x0) getegid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x2, 0x0, 0x1ff, 0xdc5f, 'syz1\x00', 0x800}) 08:20:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3ff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e22, 0x7c0000000000000, @empty, 0x3ff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0xffffffffffffffff}, &(0x7f00000001c0)=0xffffffffffffffbb) prctl$PR_GET_SECCOMP(0x15) signalfd4(r0, &(0x7f0000000000)={0xe4}, 0x8, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000240)={0x39980732, r5}, &(0x7f0000000280)={0x5, 0x61b6, 0x7, 0x2, 0x400, 0xfffffffffffffffe}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000000906882810a766cb0a21155449812b68b0000"], 0x18}}, 0x0) 08:20:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x7ff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x42040) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000001340)={'filter\x00', 0x4}, 0x68) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1b, &(0x7f0000000040)=""/182, &(0x7f0000000100)=0xb6) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffe, 0x0, 0x8000000, @scatter={0x0, 0x384c8, 0x0}, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0xfffffff6, 0x0, 0x200000000000000}) flistxattr(r0, &(0x7f0000000240)=""/4096, 0x1000) 08:20:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setpipe(r0, 0x407, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850600004600c06100767e000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000040)=""/195, 0x10000000004, 0x0, [], 0x0, 0x8}, 0x2a) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x709240) 08:20:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 254.656882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 08:20:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:41 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$inet6(0xa, 0x5, 0x7) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @local}}]}, 0x110) 08:20:41 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='bcsh0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) read(r0, &(0x7f00000002c0)=""/49, 0x31) 08:20:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) 08:20:41 executing program 5: r0 = socket$kcm(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4000, 0xa) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000240)=""/180, &(0x7f0000000300)=0xb4) close(r0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000080)=""/214) r2 = socket$kcm(0x2, 0x2000000000000001, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x21, &(0x7f0000000180), 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000180)=r3, 0x1) 08:20:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) 08:20:41 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x100000803, 0x6) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000080)="5a6b92abaf428f5241731272b79e98cb6129ae9bc7316cf248953af3ecc396130238556a9326580f1f1c93938e", 0x2d, 0x2000800a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, 0xffffffffffffffff, 0x0, 0x2000, &(0x7f0000000040)) sendmsg$nl_xfrm(r2, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x13c}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0x6e) accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x800) 08:20:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x53, &(0x7f00000007c0)={{{@in, @in6=@ipv4}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000008c0)=0x7) close(r2) close(r1) 08:20:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000000)="9c5d19fddff1340da55e51839d8824d78539949d7526269d6091bf6c21fc8e80fa68b11e985b2272626f8ab20d7011a0971768dbef8a559e629c685260488528791bfc6bc0a18f5ef3139203316b334419f9c5151d6ed306d62d8f95cd5ab2dc5b89c6d470e7de7614c4c7388188d8fc51cb83a9a21bc3149f0bbabb3bb22b65353e3420cc372b4d9ec5ccf99d543732c994edc735e7604ddf4639623ba11b07321270d242fcd085808682009eb87e6a19d73dc7991992c92484265eeccd704acaad648b657a8d63aee7a99ced5e3173b4d102974cf0b9d22f79c77054ad2aa2450562d3fe1a1bca23e3d59cca0b25d6a6e11f") r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x3d5}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 08:20:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) [ 255.111142] netlink: 60 bytes leftover after parsing attributes in process `syz-executor4'. 08:20:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}]}]}, 0x16c}}, 0x0) 08:20:42 executing program 3: r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000000c0), 0x62, 0xfffffffffffffffd) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'syzkaller1\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0, r0}, &(0x7f0000000400)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha256-avx\x00'}, &(0x7f0000000180)="be5c88538ed0efb9cbfd3ece00c88b0062bb7f8fadb0d45c", 0xfffffffffffffefa}) 08:20:42 executing program 5: r0 = socket$inet(0x10, 0x8000000003, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x3, 0x80000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000280)={0x0, 0x9, 0x1, 0x5, {0x1, 0x20, 0x1}}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000000000000000000", 0x4c}], 0x1}, 0x40) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x10f140) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="00000006000000000000000000000000000000f404000000000000ffff00001c00000072070000000000000800000000000000"]) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000080)={{0x0, 0x800}, 'port1\x00', 0x0, 0x100001, 0x4e12, 0x8, 0xff, 0xd624, 0x2, 0x0, 0x4}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) 08:20:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'osx.', '/selinux/status\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) getsockopt$netlink(r0, 0x10e, 0x8000000000009, 0x0, &(0x7f0000000000)=0x3000000) [ 255.436904] netlink: 60 bytes leftover after parsing attributes in process `syz-executor4'. 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}]}]}, 0x16c}}, 0x0) 08:20:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0xe29f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000540), 0x10) r2 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0x50, &(0x7f00000003c0)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x80000001, 0x100, 0xce, 0x0, 0xc46}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000300)=0x8) fsetxattr$security_capability(r2, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x2, 0x7}]}, 0xc, 0x2) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), 0x0, &(0x7f00000001c0), &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="200028bd7000fbdbdf6a8f5bc324d165ba4f066667aec3d9572af1786f91ba07ce3baa6d863b882f7c77ef0331fd31b81652a3a9cd2d77ef1f587c2a0768a66a0c4f520134b6d375e358187c627d3cf68cebf9408c6b738c09f9271a534a491684356666f689067b1e2cba05bb8dddc1fa53278fc516c274289be8c275fbe0b346e19708d3f295ef2ad95a7e941548c4f5d7fa9c47182e1e307221333eb2b05d22e82e421725d2eecd28300e826c32ec40040000005d0e5b58a25ff5ba5cbc8b4b4525bd27d65d1ced353e0e396aca955dbf0b07013dcc74d574ed73f4e4e141e8bb6f47d23683e071b75ed20710b863"], 0x1}}, 0x4040000) mremap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x200000000000000f, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 08:20:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x100000803, 0x6) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000080)="5a6b92abaf428f5241731272b79e98cb6129ae9bc7316cf248953af3ecc396130238556a9326580f1f1c93938e", 0x2d, 0x2000800a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, 0xffffffffffffffff, 0x0, 0x2000, &(0x7f0000000040)) sendmsg$nl_xfrm(r2, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x13c}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000a00)=0xc000000000000000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xff, @dev}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0x6e) accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x800) 08:20:42 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r2 = dup(r1) r3 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf888ed5a9"], 0x0) r5 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000240)=@add_del={0x3, &(0x7f0000000200)="69666210e8a1feff00", 0x8001}) r6 = getgid() setgid(r6) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, 0x0) mmap(&(0x7f000076e000/0x1000)=nil, 0x1000, 0x0, 0x6031, r4, 0xfffffffffffffffe) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="74727573746564c97c6622eaa5e7824259355783252e000006aaf5512a1c00dd"], 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r5, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r2, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x69) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000003c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={r7, 0x80}, &(0x7f00000004c0)=0x8) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r7, 0x3f}, &(0x7f0000000540)=0x8) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}]}]}, 0x16c}}, 0x0) [ 255.675376] netlink: 60 bytes leftover after parsing attributes in process `syz-executor4'. 08:20:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x18100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7f}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x49}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x2148}, 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local}, 0x1c) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 256.042292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:20:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0xe29f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000540), 0x10) r2 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0x50, &(0x7f00000003c0)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x80000001, 0x100, 0xce, 0x0, 0xc46}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000300)=0x8) fsetxattr$security_capability(r2, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x2, 0x7}]}, 0xc, 0x2) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), 0x0, &(0x7f00000001c0), &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="200028bd7000fbdbdf6a8f5bc324d165ba4f066667aec3d9572af1786f91ba07ce3baa6d863b882f7c77ef0331fd31b81652a3a9cd2d77ef1f587c2a0768a66a0c4f520134b6d375e358187c627d3cf68cebf9408c6b738c09f9271a534a491684356666f689067b1e2cba05bb8dddc1fa53278fc516c274289be8c275fbe0b346e19708d3f295ef2ad95a7e941548c4f5d7fa9c47182e1e307221333eb2b05d22e82e421725d2eecd28300e826c32ec40040000005d0e5b58a25ff5ba5cbc8b4b4525bd27d65d1ced353e0e396aca955dbf0b07013dcc74d574ed73f4e4e141e8bb6f47d23683e071b75ed20710b863"], 0x1}}, 0x4040000) mremap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x200000000000000f, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 08:20:42 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f0000000440)=@ng={0x4, 0x6}, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') keyctl$invalidate(0x15, 0x0) fchdir(0xffffffffffffffff) getdents64(r1, &(0x7f0000000200)=""/116, 0x184) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000003c0)={0x0, 0x0, 0x6}) quotactl(0x0, 0x0, 0x0, 0x0) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) 08:20:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="40dc4d004d0fc79c92f1ff0000c48270f2ad0500000066b805010f00d8c401781178030f01dfc4a111dc0dfd6abdd948b808000000000000000f23c80f21f835000000000f23f8f245adc401f813b4c400280000", 0x54}], 0x1, 0x7b, &(0x7f0000000200), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:42 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000002300)=ANY=[@ANYBLOB="9feb000018"], 0x0, 0x5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20) 08:20:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x16c}}, 0x0) 08:20:43 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340), 0x10000014c) write$P9_RUNLINKAT(r0, 0x0, 0x1d6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x16c}}, 0x0) 08:20:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0xac14cdab7c602783) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x1, {0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x16}, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x1fffffff0007fffc) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 08:20:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x5, 0x1, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r3}}, 0x18) write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) sched_setaffinity(r5, 0x8, &(0x7f0000000400)=0x81) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x59070000, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 08:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x16c}}, 0x0) 08:20:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x8000, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) fallocate(r0, 0x65, 0x31a, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000026c0)='/dev/dsp#\x00', 0x8, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000800)=""/151) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000240)=""/60) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0x10000, 0xffffffff00000001, 0x65}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x100, 0x0, 0x1, 0x1150}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000280)={0x1}, 0xc) getpid() r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x7fff}, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1, 0xb96, 0xbcee, 0x40, 0x8, 0x1, 0x1, 0x2, 0x7, 0x6, 0x7fff, 0x6, 0x5, 0x4, 0x6f, 0xffffffffffff7fff, 0x5, 0x8001, 0xfffffffffffffbff, 0x9e, 0x0, 0x6017, 0x6f20, 0x7b72, 0x3, 0x100000000, 0x1f, 0x200, 0x1, 0x5, 0x8152, 0x9, 0x5, 0x9, 0x1f, 0x18000000000, 0x100000001, 0x0, 0x6, 0x0, 0x334, 0x5, 0x40, 0x0, 0x40, 0x8de, 0x5, 0x4d1, 0x0, 0x3c48000000, 0x0, 0x6, 0x78, 0x43, 0x5, 0x3, 0x0, 0x6, 0x6f, 0x81, 0xffff, 0x4, 0x5, 0x0, 0x3, 0x4c48384c, 0x800, 0x8, 0xfffffffffffffffa, 0x245, 0x0, 0x0, 0x802000, 0x1, 0x10001, 0x3, 0x5, 0x66e, 0x41, 0x0, 0x4, 0x1f, 0x7ff, 0xfffffffffffffffb, 0x2, 0x148, 0x80000001, 0x6, 0x7, 0x1, 0xa494, 0x800, 0x506, 0x81, 0x0, 0x7f, 0x80000001, 0x3, 0xf29, 0x8, 0x0, 0x8, 0xdc8, 0x1, 0x4, 0x4000000000000, 0x0, 0x7f, 0x2, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1f, 0x23c, 0x5, 0x5, 0x0, 0x1], {0x0, 0x989680}}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x1, 0x5, 0x4) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x2c, 0x25, 0xe, 0x1d, 0x4, 0xfff, 0x0, 0xd5, 0x400001}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x8001}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000400)={r4, 0x1, 0x1dc}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, r5}) write$vnet(r5, &(0x7f00000011c0)={0x1, {&(0x7f00000000c0)=""/46, 0x2e, &(0x7f0000001180)=""/16, 0x3, 0x7}}, 0x68) 08:20:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x11d000}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r1, &(0x7f00000000c0)=""/128, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:20:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 256.963993] kvm: emulating exchange as write 08:20:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:43 executing program 3: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x180) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$PERF_EVENT_IOC_RESET(r1, 0xc008240a, 0x70effb) 08:20:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:44 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x5, 0x1, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r3}}, 0x18) write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) sched_setaffinity(r5, 0x8, &(0x7f0000000400)=0x81) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x59070000, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 08:20:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x40, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = dup(r0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000012c0)={"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"}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000016c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={[], [], @rand_addr=0x200}, 0x6}}, 0x80, 0x80000000}, &(0x7f0000001780)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000017c0)={0x1, 0x200, 0x2, 0x3, r3}, &(0x7f0000001800)=0x10) preadv(r2, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x0) 08:20:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"736974300000000100db41370e00", 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000012000)={&(0x7f0000000200)=@ipmr_delroute={0xc4, 0x19, 0x200, 0x70bd25, 0x25dfdbfb, {0x80, 0x14, 0x10, 0x100, 0xfc, 0x7, 0x1c12e6abe096e068, 0xe, 0x400}, [@RTA_UID={0x8, 0x19, r2}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x329, 0x26, r1}}, @RTA_METRICS={0x8c, 0x8, "2d340e4b8ad040586f84b59ba0fee3d1ff70698718d02e22a336d8755462066e1a830fb32d533b252e007b1d2b5179b94ffc07d987a2489df18b4b759dfd987f1b291f856ab0f9b183af940923f1c3f59c79d6b63ce6b3b408ebfd9e8ed8a73ee8f61a6a047df716f9e07381926c7f6bf52119253a87a8e7bb786da20192b32ac26e47b508"}]}, 0xc4}}, 0x0) 08:20:44 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 257.697371] FAULT_INJECTION: forcing a failure. [ 257.697371] name failslab, interval 1, probability 0, space 0, times 1 [ 257.714154] CPU: 0 PID: 8761 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #148 [ 257.721468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.730827] Call Trace: [ 257.733430] dump_stack+0x244/0x39d [ 257.737088] ? dump_stack_print_info.cold.1+0x20/0x20 [ 257.742304] should_fail.cold.4+0xa/0x17 [ 257.742324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.751480] ? lock_downgrade+0x900/0x900 [ 257.751495] ? check_preemption_disabled+0x48/0x280 [ 257.751512] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 257.751530] ? kasan_check_read+0x11/0x20 [ 257.751542] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 257.751557] ? __netlink_insert+0xd2c/0x13b0 [ 257.751573] ? __netlink_insert+0xd2c/0x13b0 [ 257.783777] ? find_held_lock+0x36/0x1c0 [ 257.787849] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.793298] __should_failslab+0x124/0x180 [ 257.797525] should_failslab+0x9/0x14 [ 257.801318] kmem_cache_alloc_node+0x26e/0x730 [ 257.805889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.811416] ? check_preemption_disabled+0x48/0x280 [ 257.816427] __alloc_skb+0x119/0x770 [ 257.820130] ? netdev_alloc_frag+0x1f0/0x1f0 [ 257.824537] ? __release_sock+0x3a0/0x3a0 [ 257.828676] ? __local_bh_enable_ip+0x160/0x260 [ 257.833359] ? netlink_insert+0xfe/0x240 [ 257.837434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.842960] ? netlink_autobind.isra.34+0x232/0x310 [ 257.847971] netlink_sendmsg+0xb29/0xfc0 [ 257.852028] ? netlink_unicast+0x760/0x760 [ 257.856258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.861784] ? security_socket_sendmsg+0x94/0xc0 [ 257.866528] ? netlink_unicast+0x760/0x760 [ 257.870756] sock_sendmsg+0xd5/0x120 [ 257.874484] ___sys_sendmsg+0x7fd/0x930 [ 257.878451] ? copy_msghdr_from_user+0x580/0x580 [ 257.883198] ? lock_downgrade+0x900/0x900 [ 257.887349] ? proc_fail_nth_write+0x9e/0x210 [ 257.891857] ? __fget_light+0x2e9/0x430 [ 257.895821] ? fget_raw+0x20/0x20 [ 257.899260] ? find_held_lock+0x36/0x1c0 [ 257.903312] ? kasan_check_write+0x14/0x20 [ 257.907539] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 257.912460] ? wait_for_completion+0x8a0/0x8a0 [ 257.917054] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.922578] ? sockfd_lookup_light+0xc5/0x160 [ 257.927065] __sys_sendmsg+0x11d/0x280 [ 257.930944] ? __ia32_sys_shutdown+0x80/0x80 [ 257.935348] ? __sb_end_write+0xd9/0x110 [ 257.939401] ? fput+0x130/0x1a0 [ 257.942668] ? do_syscall_64+0x9a/0x820 [ 257.946640] ? do_syscall_64+0x9a/0x820 [ 257.950609] ? trace_hardirqs_off_caller+0x310/0x310 [ 257.955704] __x64_sys_sendmsg+0x78/0xb0 [ 257.959755] do_syscall_64+0x1b9/0x820 [ 257.963630] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.968981] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.973895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.978737] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.983759] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.988770] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.993780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.998622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.003798] RIP: 0033:0x457659 [ 258.006982] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.025891] RSP: 002b:00007f0faaf98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.033584] RAX: ffffffffffffffda RBX: 00007f0faaf98c90 RCX: 0000000000457659 [ 258.040842] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 08:20:44 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresuid(0x0, r2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r3 = inotify_init1(0x0) dup3(r1, r3, 0x0) [ 258.048418] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.055671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0faaf996d4 [ 258.062931] R13: 00000000004c4127 R14: 00000000004d6808 R15: 0000000000000004 08:20:44 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00'}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x80000004, 0x9000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0x9, 0x6, 0x3c, 0x9, 'syz0\x00', 0x8}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000180)='vboxnet0\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x2, @remote}}) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0xa99, 0x0, 0x0, 0x4000000000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0x0, 0x5, {0xc1c0}}, 0x18) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3f}, 0x28, 0x1) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x5}, 0x0, 0x423, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x2000) 08:20:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 258.228964] FAULT_INJECTION: forcing a failure. [ 258.228964] name failslab, interval 1, probability 0, space 0, times 0 [ 258.278295] CPU: 0 PID: 8787 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #148 [ 258.285639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.295006] Call Trace: [ 258.297622] dump_stack+0x244/0x39d [ 258.301282] ? dump_stack_print_info.cold.1+0x20/0x20 [ 258.306515] should_fail.cold.4+0xa/0x17 [ 258.310601] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.310620] ? __save_stack_trace+0x8d/0xf0 [ 258.310653] ? save_stack+0xa9/0xd0 [ 258.320089] ? save_stack+0x43/0xd0 [ 258.320113] ? find_held_lock+0x36/0x1c0 [ 258.320148] ? perf_trace_sched_process_exec+0x860/0x860 [ 258.320169] ? check_preemption_disabled+0x48/0x280 [ 258.320198] __should_failslab+0x124/0x180 [ 258.346121] should_failslab+0x9/0x14 [ 258.349948] kmem_cache_alloc_node_trace+0x270/0x740 [ 258.355054] __kmalloc_node_track_caller+0x3c/0x70 [ 258.359977] __kmalloc_reserve.isra.40+0x41/0xe0 [ 258.364726] __alloc_skb+0x155/0x770 [ 258.368434] ? netdev_alloc_frag+0x1f0/0x1f0 [ 258.372832] ? __release_sock+0x3a0/0x3a0 [ 258.376974] ? __local_bh_enable_ip+0x160/0x260 [ 258.381643] ? netlink_insert+0xfe/0x240 [ 258.385714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.391436] ? netlink_autobind.isra.34+0x232/0x310 [ 258.396449] netlink_sendmsg+0xb29/0xfc0 [ 258.400514] ? netlink_unicast+0x760/0x760 [ 258.404745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.410288] ? security_socket_sendmsg+0x94/0xc0 [ 258.415041] ? netlink_unicast+0x760/0x760 [ 258.419267] sock_sendmsg+0xd5/0x120 [ 258.422974] ___sys_sendmsg+0x7fd/0x930 [ 258.426941] ? copy_msghdr_from_user+0x580/0x580 [ 258.431689] ? lock_downgrade+0x900/0x900 [ 258.435832] ? proc_fail_nth_write+0x9e/0x210 [ 258.440323] ? __fget_light+0x2e9/0x430 [ 258.444292] ? fget_raw+0x20/0x20 [ 258.447753] ? find_held_lock+0x36/0x1c0 [ 258.451813] ? kasan_check_write+0x14/0x20 [ 258.456042] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 258.460983] ? wait_for_completion+0x8a0/0x8a0 [ 258.465674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.471201] ? sockfd_lookup_light+0xc5/0x160 [ 258.475692] __sys_sendmsg+0x11d/0x280 [ 258.479575] ? __ia32_sys_shutdown+0x80/0x80 [ 258.483980] ? __sb_end_write+0xd9/0x110 [ 258.488034] ? fput+0x130/0x1a0 [ 258.491308] ? do_syscall_64+0x9a/0x820 [ 258.495270] ? do_syscall_64+0x9a/0x820 [ 258.499242] ? trace_hardirqs_off_caller+0x310/0x310 [ 258.504336] __x64_sys_sendmsg+0x78/0xb0 [ 258.508389] do_syscall_64+0x1b9/0x820 [ 258.512276] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 258.517631] ? syscall_return_slowpath+0x5e0/0x5e0 [ 258.522552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.527384] ? trace_hardirqs_on_caller+0x310/0x310 [ 258.532390] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 258.537396] ? prepare_exit_to_usermode+0x291/0x3b0 [ 258.542404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.547244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.552420] RIP: 0033:0x457659 [ 258.555627] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:20:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x6) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x917) fallocate(r0, 0x8, 0x4a6f, 0x3ff) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0x5, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900)='/dev/kvm\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000680)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000001940)=ANY=[], 0x0, 0x3) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001800)={0x96, 0x7, 0x6, 0x0, 0x9, 0x1, 0x4}) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000018c0)=0x14) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000003c0)=""/204, &(0x7f0000000500)=0xcc) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000380)=0x4, 0x4) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r4, 0x540b, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000240)=0xfffffffffffffffa) [ 258.574616] RSP: 002b:00007f0faaf98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.582312] RAX: ffffffffffffffda RBX: 00007f0faaf98c90 RCX: 0000000000457659 [ 258.589572] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 258.596831] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.604088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0faaf996d4 [ 258.611346] R13: 00000000004c4127 R14: 00000000004d6808 R15: 0000000000000004 [ 258.707941] audit: type=1400 audit(1544343645.420:51): avc: denied { map } for pid=8783 comm="syz-executor3" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=3664 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 08:20:45 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="78d70b", 0x3, 0xfffffffffffffffe) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vsock\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000007c0)={{0x3f, @multicast1, 0x4e21, 0x4, 'lblc\x00', 0x30, 0x1f, 0x4e}, {@multicast1, 0x4e22, 0x2000, 0x6, 0x8, 0x9}}, 0x44) r2 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="3a2eac873a66276c52f4534a2707c988", 0x10, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="2b81aaa128b16e792ff45e02dca2cedd80e11a9b7b1b29998d13839811f32a8348331bd276aa9126f46ec9673ba6a9a5c61d87a21146d6049a8bdada8a383947655d0e99325e7b261fa808747888bd375ccd9c455e96f1012f6a90992bd891c100d476a09a5b5dc3624286a7f99df4fbd90d202f8edf117ff83dca0a45f714dc2e", 0x81, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000840)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x8) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000980)={0x2, 0x7}) getresuid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) fstat(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000008c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000940)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x4}, r8}}, 0x30) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640)={r5, r6, r7}, 0xc) r9 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0x0, r9) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000880)='/dev/video37\x00', 0x2, 0x0) tkill(r5, 0x34) keyctl$dh_compute(0x17, &(0x7f0000000680)={r10, r10, r0}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={'rmd160\x00'}}) 08:20:45 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:45 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 258.877452] Unknown ioctl 1074819274 08:20:45 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) getpid() mknod(&(0x7f0000000000)='./file1\x00', 0x1030, 0x0) 08:20:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x0, 0xffffffe4, &(0x7f000000cf3d)=""/195}, 0x16) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x2000) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x4, 0x0, 0x800}) 08:20:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 258.905635] FAULT_INJECTION: forcing a failure. [ 258.905635] name failslab, interval 1, probability 0, space 0, times 0 [ 258.922385] Unknown ioctl 1074819274 [ 258.968143] CPU: 0 PID: 8815 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #148 [ 258.975548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.984912] Call Trace: [ 258.987526] dump_stack+0x244/0x39d [ 258.991284] ? dump_stack_print_info.cold.1+0x20/0x20 [ 258.996497] ? __lock_acquire+0x62f/0x4c20 [ 259.000760] should_fail.cold.4+0xa/0x17 [ 259.004844] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.009977] ? find_held_lock+0x36/0x1c0 [ 259.014065] ? avc_has_perm_noaudit+0x424/0x630 [ 259.018752] ? lock_downgrade+0x900/0x900 [ 259.022916] ? check_preemption_disabled+0x48/0x280 [ 259.027950] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 259.032894] ? kasan_check_read+0x11/0x20 [ 259.037057] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 259.042336] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 259.042363] ? rcu_softirq_qs+0x20/0x20 [ 259.042379] ? rcu_softirq_qs+0x20/0x20 [ 259.055648] ? avc_has_perm_noaudit+0x44b/0x630 [ 259.060321] __should_failslab+0x124/0x180 [ 259.064554] should_failslab+0x9/0x14 [ 259.068348] kmem_cache_alloc+0x47/0x730 [ 259.072410] xfrm_state_alloc+0xa1/0x650 [ 259.076464] ? mark_held_locks+0x130/0x130 [ 259.080688] ? xfrm_get_acqseq+0x50/0x50 [ 259.084745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.090277] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 259.095460] ? validate_nla+0x29a/0x1650 [ 259.099520] xfrm_add_acquire+0x10f/0xbe0 [ 259.103683] ? selinux_capable+0x36/0x40 [ 259.107741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.113273] ? xfrm_alloc_userspi+0xac0/0xac0 [ 259.117758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.123409] ? __nla_parse+0x12c/0x3e0 [ 259.127293] ? nla_parse+0x46/0x60 [ 259.130834] ? xfrm_alloc_userspi+0xac0/0xac0 [ 259.135321] xfrm_user_rcv_msg+0x44c/0x8e0 [ 259.139546] ? xfrm_dump_sa_done+0xf0/0xf0 [ 259.143772] ? netlink_deliver_tap+0x32e/0xf80 [ 259.148354] ? lock_downgrade+0x900/0x900 [ 259.152493] ? check_preemption_disabled+0x48/0x280 [ 259.157525] netlink_rcv_skb+0x172/0x440 [ 259.161575] ? xfrm_dump_sa_done+0xf0/0xf0 [ 259.165888] ? netlink_ack+0xb80/0xb80 [ 259.169762] ? rcu_softirq_qs+0x20/0x20 [ 259.173736] xfrm_netlink_rcv+0x6f/0x90 [ 259.177700] netlink_unicast+0x5a5/0x760 [ 259.181756] ? netlink_attachskb+0x9a0/0x9a0 [ 259.186258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.191788] netlink_sendmsg+0xa18/0xfc0 [ 259.195846] ? netlink_unicast+0x760/0x760 [ 259.200075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.205604] ? security_socket_sendmsg+0x94/0xc0 [ 259.210349] ? netlink_unicast+0x760/0x760 [ 259.214580] sock_sendmsg+0xd5/0x120 [ 259.218288] ___sys_sendmsg+0x7fd/0x930 [ 259.222263] ? copy_msghdr_from_user+0x580/0x580 [ 259.227020] ? lock_downgrade+0x900/0x900 [ 259.231184] ? proc_fail_nth_write+0x9e/0x210 [ 259.235673] ? __fget_light+0x2e9/0x430 [ 259.239650] ? fget_raw+0x20/0x20 [ 259.243091] ? find_held_lock+0x36/0x1c0 [ 259.247152] ? kasan_check_write+0x14/0x20 [ 259.251382] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 259.256300] ? wait_for_completion+0x8a0/0x8a0 [ 259.260884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.266412] ? sockfd_lookup_light+0xc5/0x160 [ 259.270898] __sys_sendmsg+0x11d/0x280 [ 259.274776] ? __ia32_sys_shutdown+0x80/0x80 [ 259.279185] ? __sb_end_write+0xd9/0x110 [ 259.283245] ? fput+0x130/0x1a0 [ 259.286516] ? do_syscall_64+0x9a/0x820 [ 259.290479] ? do_syscall_64+0x9a/0x820 [ 259.294454] ? trace_hardirqs_off_caller+0x310/0x310 [ 259.299549] __x64_sys_sendmsg+0x78/0xb0 [ 259.303603] do_syscall_64+0x1b9/0x820 [ 259.307479] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 259.312833] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.317753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.322614] ? trace_hardirqs_on_caller+0x310/0x310 [ 259.327622] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.332648] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.337656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.342492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.347671] RIP: 0033:0x457659 [ 259.350860] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:20:46 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa9, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioperm(0x0, 0xd0f, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) keyctl$setperm(0x5, r1, 0x4102002) [ 259.369747] RSP: 002b:00007f0faaf98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.377445] RAX: ffffffffffffffda RBX: 00007f0faaf98c90 RCX: 0000000000457659 [ 259.384705] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 259.391965] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 259.399236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0faaf996d4 [ 259.406492] R13: 00000000004c4127 R14: 00000000004d6808 R15: 0000000000000004 08:20:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x2bb, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000150007031dfffd946fa2830020200a0009000000001d0500000000000000ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 08:20:46 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa9, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioperm(0x0, 0xd0f, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) keyctl$setperm(0x5, r1, 0x4102002) 08:20:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 259.546778] audit: type=1400 audit(1544343646.250:52): avc: denied { prog_run } for pid=8824 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:20:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:46 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f0000000480)='comm\x00') r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa9, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioperm(0x0, 0xd0f, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) keyctl$setperm(0x5, r1, 0x4102002) 08:20:46 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:46 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x480000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400001, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socket$bt_hidp(0x1f, 0x3, 0x6) close(r0) 08:20:46 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 259.768048] FAULT_INJECTION: forcing a failure. [ 259.768048] name failslab, interval 1, probability 0, space 0, times 0 [ 259.842162] CPU: 0 PID: 8850 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #148 [ 259.849621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.858987] Call Trace: [ 259.861594] dump_stack+0x244/0x39d [ 259.865247] ? dump_stack_print_info.cold.1+0x20/0x20 [ 259.870469] should_fail.cold.4+0xa/0x17 [ 259.874556] ? __debug_object_init+0x57d/0x1290 [ 259.879241] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.884382] ? debug_object_free+0x690/0x690 [ 259.888803] ? zap_class+0x640/0x640 [ 259.892526] ? kasan_kmalloc+0xc7/0xe0 [ 259.896421] ? kasan_slab_alloc+0x12/0x20 [ 259.900569] ? kmem_cache_alloc+0x12e/0x730 [ 259.904888] ? xfrm_state_alloc+0xa1/0x650 [ 259.909119] ? zap_class+0x640/0x640 [ 259.912829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.918356] ? check_preemption_disabled+0x48/0x280 [ 259.923364] ? find_held_lock+0x36/0x1c0 [ 259.927422] ? __lock_is_held+0xb5/0x140 [ 259.931485] ? perf_trace_sched_process_exec+0x860/0x860 [ 259.936924] ? __lockdep_init_map+0x105/0x590 [ 259.941411] ? lockdep_init_map+0x9/0x10 [ 259.945465] __should_failslab+0x124/0x180 [ 259.949696] should_failslab+0x9/0x14 [ 259.953485] kmem_cache_alloc_trace+0x2d7/0x750 [ 259.958151] ? tasklet_init+0x200/0x200 [ 259.962116] ? __lockdep_init_map+0x105/0x590 [ 259.966605] xfrm_policy_alloc+0xfa/0x480 [ 259.970742] ? xfrm_policy_destroy+0xc0/0xc0 [ 259.975141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.980667] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 259.985850] xfrm_policy_construct+0x2f/0x650 [ 259.990348] xfrm_add_acquire+0x271/0xbe0 [ 259.994488] ? selinux_capable+0x36/0x40 [ 259.998538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.004086] ? xfrm_alloc_userspi+0xac0/0xac0 [ 260.008573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.014100] ? __nla_parse+0x12c/0x3e0 [ 260.017979] ? nla_parse+0x46/0x60 [ 260.021507] ? xfrm_alloc_userspi+0xac0/0xac0 [ 260.025993] xfrm_user_rcv_msg+0x44c/0x8e0 [ 260.030225] ? xfrm_dump_sa_done+0xf0/0xf0 [ 260.034452] ? netlink_deliver_tap+0x32e/0xf80 [ 260.039022] ? lock_downgrade+0x900/0x900 [ 260.043172] ? check_preemption_disabled+0x48/0x280 [ 260.048209] netlink_rcv_skb+0x172/0x440 [ 260.052260] ? xfrm_dump_sa_done+0xf0/0xf0 [ 260.056487] ? netlink_ack+0xb80/0xb80 [ 260.060368] ? rcu_softirq_qs+0x20/0x20 [ 260.064341] xfrm_netlink_rcv+0x6f/0x90 [ 260.068305] netlink_unicast+0x5a5/0x760 [ 260.072357] ? netlink_attachskb+0x9a0/0x9a0 [ 260.076755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.082286] netlink_sendmsg+0xa18/0xfc0 [ 260.086339] ? netlink_unicast+0x760/0x760 [ 260.090570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.096098] ? security_socket_sendmsg+0x94/0xc0 [ 260.100852] ? netlink_unicast+0x760/0x760 [ 260.105081] sock_sendmsg+0xd5/0x120 [ 260.108785] ___sys_sendmsg+0x7fd/0x930 [ 260.112755] ? copy_msghdr_from_user+0x580/0x580 [ 260.117506] ? lock_downgrade+0x900/0x900 [ 260.121736] ? proc_fail_nth_write+0x9e/0x210 [ 260.126226] ? __fget_light+0x2e9/0x430 [ 260.130196] ? fget_raw+0x20/0x20 [ 260.133650] ? find_held_lock+0x36/0x1c0 [ 260.137877] ? kasan_check_write+0x14/0x20 [ 260.142101] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 260.147026] ? wait_for_completion+0x8a0/0x8a0 [ 260.151614] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.157141] ? sockfd_lookup_light+0xc5/0x160 [ 260.161629] __sys_sendmsg+0x11d/0x280 [ 260.165513] ? __ia32_sys_shutdown+0x80/0x80 [ 260.169910] ? __sb_end_write+0xd9/0x110 [ 260.173963] ? fput+0x130/0x1a0 [ 260.177237] ? do_syscall_64+0x9a/0x820 [ 260.181198] ? do_syscall_64+0x9a/0x820 [ 260.185174] ? trace_hardirqs_off_caller+0x310/0x310 [ 260.190287] __x64_sys_sendmsg+0x78/0xb0 [ 260.194336] do_syscall_64+0x1b9/0x820 [ 260.198216] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 260.203577] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.208493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.213794] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.218803] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.223810] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.228832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.233672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.238852] RIP: 0033:0x457659 [ 260.242046] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.260930] RSP: 002b:00007f0faaf98c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.268628] RAX: ffffffffffffffda RBX: 00007f0faaf98c90 RCX: 0000000000457659 [ 260.275883] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 260.283138] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 08:20:46 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="010028bd7000fcdbdf"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000300)=0x4, 0x29d) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000003c0)='syz0\x00') write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="c2cbf7f50b3a10092304672fbef69bdffbfb057a81ce60746cdd12b51df104d4cc345d06b8a33d107debf2a2afbb00647c540bff5e4278ddc48aabb68d672e151ee84253df303159cd947dfe4f8e250edc202f392bd066705dc949d383079f332623b3c21de0c3130efe50286d5715cf742379a66607039570f32593ca282b657447cbb7be25b3d22c1f4cb452630e9123b200"], 0x93) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ptrace$setregset(0x4205, r2, 0x205, &(0x7f0000000240)={&(0x7f00000007c0)="e88c1c4dcfa6e8fd2f38af31a226a581f001340ac45723b3d12d3715412fc9f3830a6a9a3a661b559b938fa0e357812152ee8cc16e6ad6260e29f931d0845ebeea3c4d2dcdda0f32899c58b0f2718138366f1e5639a7da75c48b7b30036d68f9aa2eace4249abcce5313c1bd98d302f7b0c111f9ed2c55afe1ec517bdaf958f373b9fc2e2dabaf0ceb65c1d4646f2887bbe6bc20d1317f898f34b0325c8f", 0x9e}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/95) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000380)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x2, 0x0) r5 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000500)=0x2, 0x4) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000400)={@loopback, 0x0, 0x3, 0x0, 0x4, 0x4}, 0xffffffffffffff9c) exit(0x7f) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x400000, 0x0) fcntl$setpipe(r6, 0x407, 0x6) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0x100000, 0xd000], 0x8, 0x0, 0x8}) 08:20:47 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:47 executing program 3: r0 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r2 = geteuid() mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='9p\x00', 0x4400, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=unix,version=name=gfs2\x00,posixacl,dfltgid=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,version=9p2000,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000000006,cache=none,subj_type=gfs2\x00,fowner=', @ANYRESDEC=r2, @ANYBLOB=',smackfsfloor=gfs2\x00,dont_measure,subj_role=rgrplvb,func=MMAP_CHECK,\x00']) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file1\x00', 0x0, 0x10}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x7, 0x10000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) inotify_add_watch(r3, &(0x7f00000004c0)='./file0/file0\x00', 0x40000008) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000440)=0xcd83, 0x4) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@rgrplvb='rgrplvb'}, {@quota_on='quota=on'}]}) [ 260.290399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0faaf996d4 [ 260.297658] R13: 00000000004c4127 R14: 00000000004d6808 R15: 0000000000000004 08:20:47 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 260.368281] gfs2: not a GFS2 filesystem [ 260.407943] FAULT_INJECTION: forcing a failure. [ 260.407943] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 260.441525] gfs2: not a GFS2 filesystem [ 260.447148] CPU: 0 PID: 8861 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #148 [ 260.454632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.464021] Call Trace: [ 260.466629] dump_stack+0x244/0x39d [ 260.470282] ? dump_stack_print_info.cold.1+0x20/0x20 [ 260.475491] ? __lock_acquire+0x62f/0x4c20 [ 260.479751] should_fail.cold.4+0xa/0x17 [ 260.483829] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.488946] ? zap_class+0x640/0x640 [ 260.492666] ? print_usage_bug+0xc0/0xc0 [ 260.496744] ? zap_class+0x640/0x640 [ 260.500486] ? __lock_is_held+0xb5/0x140 [ 260.504563] ? lock_downgrade+0x900/0x900 [ 260.508721] ? lock_release+0xa00/0xa00 [ 260.512710] ? perf_trace_sched_process_exec+0x860/0x860 [ 260.518174] ? mark_held_locks+0x130/0x130 [ 260.522424] ? __might_sleep+0x95/0x190 [ 260.526414] __alloc_pages_nodemask+0x366/0xea0 [ 260.531103] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 260.536164] ? __lock_acquire+0x62f/0x4c20 [ 260.540419] ? _parse_integer+0x134/0x180 [ 260.544588] ? mark_held_locks+0x130/0x130 [ 260.548836] ? mark_held_locks+0x130/0x130 [ 260.553105] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.558665] alloc_pages_vma+0x13d/0x690 [ 260.562753] __handle_mm_fault+0x27f8/0x5be0 [ 260.567185] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 260.572058] ? find_held_lock+0x36/0x1c0 [ 260.576151] ? zap_class+0x640/0x640 [ 260.579875] ? zap_class+0x640/0x640 [ 260.583601] ? proc_cwd_link+0x1d0/0x1d0 [ 260.587675] ? find_held_lock+0x36/0x1c0 [ 260.591755] ? handle_mm_fault+0x42a/0xc70 [ 260.596011] ? lock_downgrade+0x900/0x900 [ 260.600174] ? check_preemption_disabled+0x48/0x280 [ 260.605211] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 260.610157] ? kasan_check_read+0x11/0x20 [ 260.614317] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 260.619623] ? rcu_softirq_qs+0x20/0x20 [ 260.623605] ? trace_hardirqs_off_caller+0x310/0x310 [ 260.628720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.634269] ? check_preemption_disabled+0x48/0x280 [ 260.639302] handle_mm_fault+0x54f/0xc70 [ 260.643383] ? __handle_mm_fault+0x5be0/0x5be0 [ 260.647983] ? find_vma+0x34/0x190 [ 260.651546] __do_page_fault+0x5e8/0xe60 [ 260.655638] ? trace_hardirqs_off+0xb8/0x310 [ 260.660070] do_page_fault+0xf2/0x7e0 [ 260.663881] ? vmalloc_sync_all+0x30/0x30 [ 260.668055] ? error_entry+0x70/0xd0 [ 260.671773] ? trace_hardirqs_off_caller+0xbb/0x310 [ 260.676779] ? trace_hardirqs_on_caller+0xc0/0x310 [ 260.681703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.686701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.691547] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.697364] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 260.702814] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.707822] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.712831] ? page_fault+0x8/0x30 [ 260.716365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.721197] ? page_fault+0x8/0x30 [ 260.724725] page_fault+0x1e/0x30 [ 260.728167] RIP: 0033:0x40688d [ 260.731354] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 260.750244] RSP: 002b:00007f84bc9b60a0 EFLAGS: 00010206 08:20:47 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x8000, 0x6, @dev}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x0, &(0x7f0000000cc0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x9, 0xa979) tee(r1, r0, 0x0, 0x6) r2 = dup(r1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='ppp0vboxnet1.GPL@:bdevsecurity\x00', r2}, 0x10) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000000500)={0x0, 0xf, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_delete(r4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$notify(r3, 0x402, 0x1) r5 = open(&(0x7f0000004a40)='./bus\x00', 0x141042, 0xc0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003480)={0x0, 0x0}) bind$bt_rfcomm(r2, &(0x7f0000004a00)={0x1f, {0xfffffffffffffffd, 0x5, 0xf4, 0x4, 0x10000, 0x8}, 0x101}, 0xa) recvmmsg(r1, &(0x7f00000047c0)=[{{&(0x7f0000000580)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/249, 0xf9}], 0x2, &(0x7f0000000800)=""/221, 0xdd, 0x3ff}}, {{&(0x7f0000000900)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f00000004c0)=""/43, 0x2b}, {&(0x7f0000000a80)=""/241, 0xf1}], 0x3, &(0x7f0000000bc0)=""/142, 0x8e, 0xb36}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/7, 0x7}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000d40)=""/22, 0x16, 0x9}, 0x7fff}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/54, 0x36}], 0x2, &(0x7f0000000f40)=""/114, 0x72, 0x5}, 0x97}, {{&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001040)=""/202, 0xca}, {&(0x7f0000001140)=""/171, 0xab}, {&(0x7f0000001200)=""/3, 0x3}, {&(0x7f0000001240)=""/244, 0xf4}], 0x4, &(0x7f0000001380)=""/98, 0x62, 0x80000000}, 0x8}, {{&(0x7f0000001400)=@generic, 0x80, &(0x7f0000001740)=[{&(0x7f0000001480)=""/121, 0x79}, {&(0x7f0000001500)=""/123, 0x7b}, {&(0x7f0000001580)=""/155, 0x9b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f00000018c0)=""/2, 0x2}, {&(0x7f0000001900)=""/6, 0x6}, {&(0x7f0000001940)=""/92, 0x5c}], 0x4, &(0x7f0000001a00)=""/153, 0x99, 0x4}, 0x100}, {{&(0x7f0000001ac0)=@alg, 0x80, &(0x7f0000003200)=[{&(0x7f0000001b40)=""/251, 0xfb}, {&(0x7f0000001c40)=""/146, 0x92}, {&(0x7f0000001d00)=""/157, 0x9d}, {&(0x7f0000001f00)=""/157, 0x9d}, {&(0x7f0000001dc0)=""/66, 0x42}, {&(0x7f0000003040)=""/203, 0xcb}, {&(0x7f0000001fc0)=""/28, 0x1c}, {&(0x7f0000003140)=""/168, 0xa8}], 0x8, &(0x7f0000003280)=""/229, 0xe5, 0x4}, 0x80000001}, {{&(0x7f0000003380)=@ipx, 0x80, &(0x7f0000003400)=[{&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/176, 0xb0}], 0x2, &(0x7f00000046c0)=""/243, 0xf3, 0xfffffffffffffff8}, 0x4}], 0x9, 0x0, &(0x7f00000034c0)={r6, r7+30000000}) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=""/110, 0x6e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r1, r5, &(0x7f00000000c0), 0x8000fffffffe) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000280)) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x1b, 0x6, 0xd1010, 0xfc82, 0x2, 0x8, 0x7ff}}, 0x50) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x8000) 08:20:47 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000002c0)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f00000009c0)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000700)=ANY=[@ANYBLOB="46393c29b1c76137fdb011543247bc69c1e6f3d10087b7218d6193eca8d756d3e3a43c867631a70b31326a720c98ab48f457921c38d10dde73df50d92200ebfa166f53d2e7c18bcc765b3a8150d41a3a93af69aa0220c015de624fa1b66af5ea851f74b88abfe6f7573847dd3f8e828d1f5b6193349f589b24a55253a59d5ebf9f746eae1e9a32d3fbe6598e2614b1355ce82418685e7abe29fab54cd057f3c2dce754d4646b221bc63e9de1a5fbb4fd3e9ab5359fe1e51dfd504cb219635e77ad12f2d1f45f6703791d980046b00bf2e05c9ec9000000"], 0x0, &(0x7f0000fdb000)='ubifs\x00', 0x80010, 0x0) mount(&(0x7f0000000a00)=ANY=[@ANYBLOB="580865fe7abf5e578ec7cdaa263e2a847e4a60aa3b8a46cc36d1fbeddac06edeb9c597bad6dd2cfa4a33d79f02afc144462488d50454d269f7354b6a79e302ee59af924d3db56472cf7e0684b6a8d2527db51a562be8c2658ae4de215379eb03747c17ddb8b8f1f342139f971b3c88c68107b679c383d292027731c542488ae9eeda8d985b8b1e1fdafe544400ba6b47"], &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r5 = dup2(r2, r2) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000580)={@remote, @multicast2}, &(0x7f00000005c0)=0xc) write$FUSE_OPEN(r5, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) r6 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r6) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000500)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000140)) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r2) mount(&(0x7f0000000600)=@nullb='/dev/nullb0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='coda\x00', 0x20400, &(0x7f00000006c0)="5df8213a7365637572697479657468302f656d315d00") getdents64(r0, &(0x7f0000000200)=""/116, 0x184) getsockname$packet(r3, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000008c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, [], r7, 0xb}, 0x48) [ 260.755595] RAX: 0000000000406880 RBX: 00007f84bc9b7c90 RCX: 0000000000000000 [ 260.762852] RDX: 000000002000d000 RSI: 0000000000000005 RDI: 0000000000000006 [ 260.770113] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.777370] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f84bc9b86d4 [ 260.784626] R13: 00000000004c505b R14: 00000000004d8c80 R15: 0000000000000007 08:20:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 260.812418] syz-executor0 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 [ 260.822643] syz-executor0 cpuset=syz0 mems_allowed=0 [ 260.870955] CPU: 0 PID: 8861 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #148 [ 260.878297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.887673] Call Trace: [ 260.890285] dump_stack+0x244/0x39d [ 260.893934] ? dump_stack_print_info.cold.1+0x20/0x20 [ 260.899161] dump_header+0x27b/0xf72 [ 260.902901] ? mark_held_locks+0x130/0x130 [ 260.907152] ? pagefault_out_of_memory+0x197/0x197 [ 260.912117] ? __lock_acquire+0x62f/0x4c20 [ 260.916377] ? zap_class+0x640/0x640 [ 260.920107] ? print_usage_bug+0xc0/0xc0 [ 260.924179] ? print_usage_bug+0xc0/0xc0 [ 260.928238] ? lock_downgrade+0x900/0x900 [ 260.932376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.937903] ? find_held_lock+0x36/0x1c0 [ 260.941998] ? mark_held_locks+0xc7/0x130 [ 260.946137] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 260.951228] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 260.956318] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 260.960910] ? trace_hardirqs_on+0xbd/0x310 [ 260.965223] ? kasan_check_read+0x11/0x20 [ 260.969362] ? ___ratelimit+0x3b4/0x672 [ 260.973322] ? trace_hardirqs_off_caller+0x310/0x310 [ 260.978414] ? trace_hardirqs_on+0x310/0x310 [ 260.982810] ? lock_downgrade+0x900/0x900 [ 260.986949] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 260.992049] ? ___ratelimit+0x3b9/0x672 [ 260.996015] ? idr_get_free+0xf70/0xf70 [ 260.999988] ? kasan_check_read+0x11/0x20 [ 261.004124] ? do_raw_spin_unlock+0xa7/0x330 [ 261.008529] oom_kill_process.cold.27+0x10/0x903 [ 261.013276] ? zap_class+0x640/0x640 [ 261.016988] ? _raw_spin_unlock+0x2c/0x50 [ 261.021130] ? oom_badness+0xe6/0xaa0 [ 261.024926] ? oom_evaluate_task+0x540/0x540 [ 261.029324] ? find_held_lock+0x36/0x1c0 [ 261.033376] ? out_of_memory+0x974/0x1430 [ 261.037515] ? lock_downgrade+0x900/0x900 [ 261.041653] ? check_preemption_disabled+0x48/0x280 [ 261.047176] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 261.052109] ? kasan_check_read+0x11/0x20 [ 261.056244] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.061511] ? rcu_softirq_qs+0x20/0x20 [ 261.065478] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 261.070571] ? oom_evaluate_task+0x302/0x540 [ 261.074978] out_of_memory+0xa84/0x1430 [ 261.078951] ? oom_killer_disable+0x3a0/0x3a0 [ 261.083441] ? pagefault_out_of_memory+0x150/0x197 [ 261.088365] ? __ww_mutex_check_waiters+0x160/0x160 [ 261.093373] ? kasan_check_read+0x11/0x20 [ 261.097509] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.102862] ? rcu_softirq_qs+0x20/0x20 [ 261.106827] ? trace_hardirqs_off_caller+0x310/0x310 [ 261.111919] pagefault_out_of_memory+0x172/0x197 [ 261.116676] ? out_of_memory+0x1430/0x1430 [ 261.121084] ? up_read_non_owner+0x100/0x100 [ 261.125488] mm_fault_error+0x1bd/0x350 [ 261.129450] ? find_vma+0x34/0x190 [ 261.132982] __do_page_fault+0xcf2/0xe60 [ 261.137037] ? trace_hardirqs_off+0xb8/0x310 [ 261.141452] do_page_fault+0xf2/0x7e0 [ 261.145266] ? vmalloc_sync_all+0x30/0x30 [ 261.149421] ? error_entry+0x70/0xd0 [ 261.153122] ? trace_hardirqs_off_caller+0xbb/0x310 [ 261.158130] ? trace_hardirqs_on_caller+0xc0/0x310 [ 261.163051] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.167987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.172819] ? trace_hardirqs_on_caller+0x310/0x310 [ 261.177826] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 261.183266] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 261.188276] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.193280] ? page_fault+0x8/0x30 [ 261.196813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.201644] ? page_fault+0x8/0x30 [ 261.205174] page_fault+0x1e/0x30 [ 261.208614] RIP: 0033:0x40688d 08:20:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf0ffffff00000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 261.211805] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 261.230691] RSP: 002b:00007f84bc9b60a0 EFLAGS: 00010206 [ 261.236043] RAX: 0000000000406880 RBX: 00007f84bc9b7c90 RCX: 0000000000000000 [ 261.243308] RDX: 000000002000d000 RSI: 0000000000000005 RDI: 0000000000000006 [ 261.250562] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.257819] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f84bc9b86d4 [ 261.265081] R13: 00000000004c505b R14: 00000000004d8c80 R15: 0000000000000007 08:20:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0xf, 0x80e4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) 08:20:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x500000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:48 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000001c0)={0xa, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = creat(&(0x7f0000000600)='./file0\x00', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @mcast2, 0x8001}, r3}}, 0x30) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x20000, 0x0) accept4$unix(r4, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x80000) timer_create(0x3, &(0x7f0000000400)={0x0, 0x4}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x2) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd70e6fedbdf25010015000c00060002000000000000000c0008000900000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000480)=[{0x4, 0x4, 0x900f, 0x8}, {0x2, 0x296a, 0xff, 0x4}]}, 0x10) ioctl$TIOCLINUX5(r5, 0x541c, &(0x7f0000000100)={0x5, 0x1f, 0x122, 0x1}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000700)={0xa, 0x4, 0xfa00, {r3}}, 0xc) [ 261.549531] Mem-Info: [ 261.556893] active_anon:137533 inactive_anon:191 isolated_anon:0 [ 261.556893] active_file:8118 inactive_file:36954 isolated_file:0 [ 261.556893] unevictable:0 dirty:205 writeback:0 unstable:0 [ 261.556893] slab_reclaimable:13700 slab_unreclaimable:109435 [ 261.556893] mapped:55223 shmem:244 pagetables:1169 bounce:0 [ 261.556893] free:1223098 free_pcp:982 free_cma:0 [ 261.628014] Node 0 active_anon:535604kB inactive_anon:756kB active_file:32476kB inactive_file:147868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220812kB dirty:876kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 374784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 261.658464] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.688743] lowmem_reserve[]: 0 2818 6321 6321 [ 261.693492] Node 0 DMA32 free:2887356kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1424kB local_pcp:72kB free_cma:0kB [ 261.721506] lowmem_reserve[]: 0 0 3503 3503 [ 261.725847] Node 0 Normal free:2003536kB min:37364kB low:46704kB high:56044kB active_anon:535604kB inactive_anon:756kB active_file:32476kB inactive_file:147868kB unevictable:0kB writepending:876kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7168kB pagetables:4432kB bounce:0kB free_pcp:2844kB local_pcp:1476kB free_cma:0kB [ 261.725888] lowmem_reserve[]: 0 0 0 0 [ 261.760344] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 261.774107] Node 0 DMA32: 3*4kB (M) 0*8kB 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 703*4096kB (M) = 2887356kB [ 261.789589] Node 0 Normal: 7830*4kB (UME) 1182*8kB (UM) 783*16kB (M) 406*32kB (UM) 192*64kB (UME) 12*128kB (UM) 17*256kB (UM) 30*512kB (UM) 3*1024kB (UM) 4*2048kB (ME) 462*4096kB (UM) = 2003448kB [ 261.807269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.816105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 261.825271] 45329 total pagecache pages [ 261.829381] 0 pages in swap cache [ 261.832840] Swap cache stats: add 0, delete 0, find 0/0 [ 261.838276] Free swap = 0kB [ 261.841290] Total swap = 0kB [ 261.844289] 1965979 pages RAM [ 261.847497] 0 pages HighMem/MovableOnly [ 261.851468] 342853 pages reserved [ 261.854905] 0 pages cma reserved [ 261.858332] Out of memory: Kill process 8717 (syz-executor3) score 1005 or sacrifice child [ 261.868171] Killed process 8717 (syz-executor3) total-vm:70340kB, anon-rss:2192kB, file-rss:33560kB, shmem-rss:0kB 08:20:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:48 executing program 4: r0 = inotify_init() r1 = creat(0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./bus\x00', 0xfe) ppoll(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)='2', 0x1}], 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r3 = accept4(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000200)=0x25c, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r5 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r5, 0x1000000) sendfile(r4, r5, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) getsockname(r3, &(0x7f0000000280)=@pppoe, &(0x7f0000000140)=0x80) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UI_DEV_DESTROY(r1, 0x5502) 08:20:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:48 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./fille1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) 08:20:48 executing program 5: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) tgkill(r2, r2, 0x21) 08:20:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 261.880999] oom_reaper: reaped process 8717 (syz-executor3), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 08:20:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8000a0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f4b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000000009) [ 261.975786] overlayfs: missing 'workdir' 08:20:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 262.029304] overlayfs: missing 'workdir' 08:20:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x11000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:48 executing program 3: write$tun(0xffffffffffffffff, &(0x7f0000001640)=ANY=[], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0xffffffff, 0x80, 0xaab8, 0x83, 0x0, 0x0, 0x3050, 0x8, 0x5, 0x2, 0x401, 0x7, 0x5, 0x9d4, 0x9, 0xfffffffffffffff7, 0x6, 0x7fffffff, 0xcfa, 0x2, 0x9c, 0x6, 0x3, 0x7, 0x10001, 0x3, 0x1, 0x1, 0x1, 0x10001, 0x6, 0xfffffffffffffff7, 0x0, 0x5, 0x40, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x8, 0x7}, 0x10000, 0x28, 0x3, 0x0, 0x7, 0xffffffffffffff7f, 0xfffffffffffffff8}, r1, 0x10, r0, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000012c0)={0xea73, 0x0, 0x101, "71756575653000ebdc1d7ef2144857000000000000001000", 0xfff}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000440)={0x9, 0x0, [{0x5, 0x7, 0x0, 0x0, @adapter={0x2, 0x1, 0x200, 0x0, 0x1}}, {0x2, 0x2, 0x0, 0x0, @sint={0x4, 0x6}}, {0xffffffffffffffff, 0x3, 0x0, 0x0, @msi={0x7, 0x7f, 0x2}}, {0x40, 0x2, 0x0, 0x0, @sint={0x0, 0xb81c}}, {0x0, 0x3, 0x0, 0x0, @sint={0xffffffffffffff01, 0x9}}, {0x0, 0x2, 0x0, 0x0, @adapter={0xf73, 0x1, 0x0, 0x8, 0x20}}, {0xffffffffffff8c13, 0x7, 0x0, 0x0, @msi={0xfff, 0x8000, 0x101}}, {0x400, 0x7, 0x0, 0x0, @irqchip={0x6, 0x8000}}, {0x100000001, 0x3, 0x0, 0x0, @sint={0x4, 0x7}}]}) semget$private(0x0, 0x1d, 0x80000000402) semget$private(0x0, 0x0, 0x4) fsetxattr$security_smack_transmute(r4, &(0x7f0000001400)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000140)={0x0, 0xc96, &(0x7f0000001740)="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"}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x40000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000001c0)={{0x5811, 0x255b}, {0x3, 0x4}, 0xdd, 0x5, 0x4}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) semget$private(0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) [ 262.100351] audit: type=1400 audit(1544343648.810:53): avc: denied { map } for pid=8944 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 262.170985] audit: type=1400 audit(1544343648.880:54): avc: denied { create } for pid=8945 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:20:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 08:20:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 262.230490] audit: type=1400 audit(1544343648.920:55): avc: denied { setattr } for pid=8947 comm="syz-executor3" name="NETLINK" dev="sockfs" ino=32641 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 262.406500] audit: type=1804 audit(1544343649.110:56): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir559728470/syzkaller.H2QFNJ/57/file0" dev="sda1" ino=16718 res=1 [ 262.519708] audit: type=1804 audit(1544343649.150:57): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir559728470/syzkaller.H2QFNJ/57/file0" dev="sda1" ino=16718 res=1 08:20:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/67, &(0x7f0000000140)=0x43) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2440, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000070000000d000040050000a9ff01000000000000000000400000000001000000e4fffff0d901fbb1d163e2ff040f0000000000000a00000006"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x6, 0x0, [{0x38f}]}) 08:20:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f4b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000000009) 08:20:49 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x20000000, 0x0, 0x0, 0x0) 08:20:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000001180)={0x0, 0x4000000000000000, 0x40000000001, 0x1, 0x0, 0x6, 0x80000000000}) 08:20:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="d57884145c74785e8413b048baf0bbffffffe2"], 0x13) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x8) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0xeba75a3b61731a34) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r0) [ 262.914390] audit: type=1400 audit(1544343649.620:58): avc: denied { map } for pid=8988 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:20:49 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="736d61707300be23d763bf090b7c3d129a54da8a181f3280d11a681a3834d4fdc4f46706f9e5d03d4b7b57d15963f3d6093e524c22c5662b258db94cc3771ae1c1c9c0ab1f2f4b8a22f0f0a0a9ebb567a2d6f1b2b30392fef62b1506773dea8fe2a4e385214deb26") close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000000009) 08:20:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x607000, 0x0, 0x0, 0x0) [ 263.062210] audit: type=1400 audit(1544343649.770:59): avc: denied { create } for pid=8997 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:20:49 executing program 4: r0 = syz_open_procfs(0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, 0x0}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f00000001c0)=""/127, 0x7f}], 0x4, &(0x7f00000003c0)=""/17, 0x11}, 0x4}, {{&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/116, 0x74}], 0x4, &(0x7f0000000640)=""/183, 0xb7}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=""/4, 0x4}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/148, 0x94}], 0x3, &(0x7f0000000880)=""/138, 0x8a}, 0x10001}, {{&(0x7f0000000940)=@l2, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)=""/38, 0x26}, {&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000ac0)=""/213, 0xd5}, {&(0x7f0000000bc0)=""/114, 0x72}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/157, 0x9d}, {&(0x7f0000000dc0)=""/35, 0x23}], 0x7, &(0x7f0000000e80)=""/176, 0xb0}, 0x8}, {{&(0x7f0000000f40)=@pppoe, 0x80, &(0x7f0000001300)=[{&(0x7f0000000fc0)=""/198, 0xc6}, {&(0x7f00000010c0)=""/39, 0x27}, {&(0x7f0000001100)=""/75, 0x4b}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000001200)=""/52, 0x34}, {&(0x7f0000001240)=""/21, 0x15}, {&(0x7f0000001280)=""/96, 0x60}], 0x7, &(0x7f0000001380)=""/191, 0xbf}, 0x9}, {{&(0x7f0000001440)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001540)=[{&(0x7f00000014c0)=""/126, 0x7e}], 0x1, &(0x7f0000001580)=""/6, 0x6}, 0x5}, {{&(0x7f00000015c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001640)}, 0x1}], 0x7, 0x10023, &(0x7f0000001840)) 08:20:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="d57884145c74785e8413b048baf0bbffffffe2"], 0x13) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x8) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0xeba75a3b61731a34) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r0) 08:20:49 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8000a0ffffffff, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 263.243990] audit: type=1400 audit(1544343649.950:60): avc: denied { map } for pid=9009 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 08:20:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffffff00000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:50 executing program 3: r0 = memfd_create(&(0x7f0000403000)='\x00', 0x80000000000006) fcntl$addseals(r0, 0x409, 0x4) fcntl$setflags(r0, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x6c0, [0x0, 0x20000040, 0x20000260, 0x20000380], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x1b, 0x4, 0x10, 'eql\x00', 'veth0_to_bond\x00', 'ip6_vti0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @random="cfb824853177", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xf0, 0x1a0, 0x1f0, [@ipvs={'ipvs\x00', 0x28, {{@ipv4=@broadcast, [0xffffffff, 0xff000000, 0xff, 0xffffffff], 0x4e24, 0xff, 0x4, 0x4e24, 0xa, 0x8}}}, @state={'state\x00', 0x8, {{0x80}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x3ff, 0x20, 0x0, 0x0, "3b885a2491d18f3337ac1ec65aabb88a1257ca86e063d15dba82faaf98087c4e1abc45870297b645676de1137513a36f0462cb025b3b16f2adcf321901db7129"}}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0x5}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x2, 0x600, 'bond_slave_1\x00', 'erspan0\x00', 'ifb0\x00', 'bond_slave_0\x00', @random="e0ce66b671ce", [0x0, 0x0, 0xff, 0x0, 0xff], @dev={[], 0xc}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xc0, 0xf0}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7, 0xffff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x8, 0x88ff, 'bcsh0\x00', 'tunl0\x00', 'bridge0\x00', 'ip6gretap0\x00', @dev={[], 0x1e}, [0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xe8, 0x168, 0x198, [@ip6={'ip6\x00', 0x50, {{@mcast2, @mcast1, [0xffffff00, 0xff, 0x0, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 0x10000, 0xbb, 0x8, 0x35, 0x4e24, 0x4e20, 0x4e22, 0x4e24}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x3f, 0x1}}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffd}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x0, 0x20, 0x88ff, 'syzkaller1\x00', 'syzkaller0\x00', 'ip6_vti0\x00', 'team0\x00', @empty, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @random="332374f007a1", [0xff], 0xb0, 0x150, 0x188, [@connbytes={'connbytes\x00', 0x18, {{0x3, 0xc74, 0x1, 0x1}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x9}}}, @common=@log={'log\x00', 0x28, {{0x8000, "ccd6284b6eaf253d8578100f811f6069382060ff65e7f781d682d0fe7424", 0x1}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}}]}]}, 0x738) ftruncate(r0, 0x800000) 08:20:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)="696f34776546676800c33c48862b5f750efc8654c8c2e98f", 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/create\x00', 0x2, 0x0) r2 = socket(0x9, 0x7, 0xffffffffffffff01) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) 08:20:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 08:20:50 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000000d000040050004a900000000c1eb000000000d4000000080010000000000000025000000fff0ffff04040000000000000a000000069e"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000600000000000000000009000000000000001f00"]) 08:20:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x7, r0}, {0x2, 0x7, r0}, {0x2, 0x7, r0}, {0x2, 0x6, r0}, {0x2, 0x4, r0}], {}, [], {}, {0x2f}}, 0x54, 0xfffffffffffffffe) getgroups(0x3, &(0x7f0000000280)=[0x0, 0xee00, 0xee00]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() r4 = getegid() fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() getgroups(0x4, &(0x7f0000000380)=[0x0, 0xee01, 0x0, 0x0]) r8 = getgid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x0, r1}, {0x8, 0x4, r2}, {0x8, 0x0, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r5}, {0x8, 0x5, r6}, {0x8, 0x3, r7}, {0x8, 0x7, r8}, {0x8, 0x5, r9}, {0x8, 0x1, r10}], {0x10, 0x2}, {0x20, 0x6}}, 0x74, 0x2) 08:20:50 executing program 3: socketpair$unix(0x1, 0x1000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/100) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0xf5, 0x0, [0x4, 0x80, 0x4]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x10000, @empty, 0x3}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x1, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x13, 0x0}, 0x10) 08:20:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x200000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x8000000000, 0x0, 0x0, 0x0) 08:20:50 executing program 4: set_mempolicy(0x4002, &(0x7f00000002c0)=0x6, 0x5) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYBLOB="4d267936b38d441c9233d8b815c3f09475b20f00e20b6ae434359db9338904ff389753386658ed4d38518eb51b869ecf339e6345c7ec00b369e65f33dbffa16e9269d4a8e50a77c531c024a0df4930d07b1b8c55be22f56d8143fbb1ce7399bf7eaa15571d048cb3e63ba6860e5404b6e037d63bff32b3b1f2f29ff6717ef0a78bbb7256ca9cdccfc2e7c0fca078dc7f4bbfc751b1ebb7586e515eaab779d9ab7f24994fe914a9f5258c7eb76a11b3df0bd48a7a27018adcd6f084c7865a101ed335", @ANYPTR, @ANYRESDEC, @ANYPTR64, @ANYPTR=&(0x7f0000002800)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESHEX=r1, @ANYPTR, @ANYRES32=r1], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], @ANYRESOCT=r1, @ANYPTR64, @ANYBLOB="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", @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESDEC=r2], @ANYRES16=r2]) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) r4 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r5 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r1, 0x107, 0xfffffffffffffffe, &(0x7f0000000100)=0x100000ea3d, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, &(0x7f00000ddff8), 0x102000000) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r7 = getpid() fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v1={0x2, ']'}, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000004c0)={r1, 0x100000000, 0x10001, "bee5b09974d88aea5b9e8c3c03b123118067edf2cd2264d91250e57939b59198a988ac3a26a6f4cacc36f3700a4e56443fc5ce7e42f82750bc1f3ca9341232d0565d8f0d24bb8c25b0d2e609c585dfb4b310c21c77e3e7fd95b76135923cbb110203893429e7720f4e8adad6744daf90331d3eaafabc49f8aedf5892594a71ca34f9b78a538a5a936bbecd2ad12c7975fca2bd204f43ea184b1fa92b5c7d6675cead53d687dd9d8a6f76a8ddf686fd95ca5c0b5494bac61fa37f5f6fa8be82899780fd1bab56946b01ab400a51b32e6ccceb1379bb3cec1bd1b808304066032b9e0a917a5d1f9db8900a2517b7bd34e9ba4f"}) sched_setscheduler(r7, 0x5, &(0x7f0000000000)) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000280)={r6}) 08:20:50 executing program 1 (fault-call:6 fault-nth:0): socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x91010000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:50 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x58) r0 = socket$inet(0x2, 0x0, 0x8001) setsockopt$inet_dccp_int(r0, 0x21, 0x1b, &(0x7f0000000080)=0x7, 0x4) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x3, {0x3, 0x8}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000140)={0x4}, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0x989680}, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x1, 0x8, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x79, 0x8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x800, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x3, 0x7, 0x5784, 0x1, 0x5, 0x3, 0x0, 0x539e, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x5, 0x0, 0x1f, 0x0, @perf_config_ext={0x5}, 0x28100, 0x2eb, 0x400, 0x6, 0x1}, r3, 0x0, 0xffffffffffffff9c, 0xa) close(0xffffffffffffffff) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 08:20:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x4, 0x4) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1) sendto$inet6(r2, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) getpeername$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) [ 263.873153] FAULT_INJECTION: forcing a failure. [ 263.873153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.915473] kauditd_printk_skb: 3 callbacks suppressed [ 263.915488] audit: type=1800 audit(1544343650.620:64): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16743 res=0 [ 263.923301] CPU: 1 PID: 9065 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #148 [ 263.950672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.960035] Call Trace: [ 263.960061] dump_stack+0x244/0x39d [ 263.960080] ? dump_stack_print_info.cold.1+0x20/0x20 [ 263.960102] ? __lock_acquire+0x62f/0x4c20 [ 263.960127] should_fail.cold.4+0xa/0x17 [ 263.960146] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 263.960162] ? zap_class+0x640/0x640 [ 263.960176] ? print_usage_bug+0xc0/0xc0 [ 263.960193] ? zap_class+0x640/0x640 [ 263.960226] ? __lock_is_held+0xb5/0x140 [ 263.960248] ? lock_downgrade+0x900/0x900 [ 263.992803] ? lock_release+0xa00/0xa00 [ 263.992820] ? perf_trace_sched_process_exec+0x860/0x860 08:20:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 263.992839] ? mark_held_locks+0x130/0x130 [ 264.000599] ? __might_sleep+0x95/0x190 [ 264.000622] __alloc_pages_nodemask+0x366/0xea0 [ 264.000641] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 264.000669] ? __lock_acquire+0x62f/0x4c20 [ 264.036316] ? _parse_integer+0x134/0x180 [ 264.040496] ? mark_held_locks+0x130/0x130 [ 264.040514] ? mark_held_locks+0x130/0x130 [ 264.040536] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 264.054912] alloc_pages_vma+0x13d/0x690 [ 264.054939] __handle_mm_fault+0x27f8/0x5be0 [ 264.054962] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 264.068275] ? find_held_lock+0x36/0x1c0 [ 264.072372] ? zap_class+0x640/0x640 [ 264.076099] ? zap_class+0x640/0x640 [ 264.079825] ? proc_cwd_link+0x1d0/0x1d0 [ 264.083908] ? find_held_lock+0x36/0x1c0 [ 264.087999] ? handle_mm_fault+0x42a/0xc70 [ 264.092250] ? lock_downgrade+0x900/0x900 [ 264.096421] ? check_preemption_disabled+0x48/0x280 [ 264.101468] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 264.106409] ? kasan_check_read+0x11/0x20 [ 264.110569] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 264.111914] audit: type=1804 audit(1544343650.620:65): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir559728470/syzkaller.H2QFNJ/63/file0" dev="sda1" ino=16743 res=1 [ 264.115849] ? rcu_softirq_qs+0x20/0x20 [ 264.115867] ? trace_hardirqs_off_caller+0x310/0x310 [ 264.115887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.115908] ? check_preemption_disabled+0x48/0x280 [ 264.162070] handle_mm_fault+0x54f/0xc70 [ 264.166154] ? __handle_mm_fault+0x5be0/0x5be0 [ 264.170758] ? find_vma+0x34/0x190 [ 264.174318] __do_page_fault+0x5e8/0xe60 [ 264.178401] ? trace_hardirqs_off+0xb8/0x310 [ 264.182821] do_page_fault+0xf2/0x7e0 [ 264.186614] ? vmalloc_sync_all+0x30/0x30 [ 264.190851] ? error_entry+0x70/0xd0 [ 264.194555] ? trace_hardirqs_off_caller+0xbb/0x310 [ 264.199563] ? trace_hardirqs_on_caller+0xc0/0x310 [ 264.204482] ? syscall_return_slowpath+0x5e0/0x5e0 [ 264.209406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.214709] ? trace_hardirqs_on_caller+0x310/0x310 [ 264.219721] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 264.225163] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 264.230171] ? prepare_exit_to_usermode+0x291/0x3b0 [ 264.235176] ? page_fault+0x8/0x30 [ 264.238715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.243546] ? page_fault+0x8/0x30 [ 264.247074] page_fault+0x1e/0x30 [ 264.250514] RIP: 0033:0x40688d [ 264.253710] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 264.272708] RSP: 002b:00007f4119bd10a0 EFLAGS: 00010206 [ 264.278061] RAX: 0000000000406880 RBX: 00007f4119bd2c90 RCX: 0000000000000000 [ 264.285324] RDX: 000000002000d000 RSI: 0000000000000006 RDI: 0000000000000007 [ 264.292582] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.299842] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f4119bd36d4 [ 264.307100] R13: 00000000004c505b R14: 00000000004d8c80 R15: 0000000000000008 08:20:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 264.319598] syz-executor1 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 [ 264.336823] syz-executor1 cpuset=syz1 mems_allowed=0 [ 264.342745] CPU: 0 PID: 9065 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #148 [ 264.350038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.359397] Call Trace: [ 264.362009] dump_stack+0x244/0x39d [ 264.365659] ? dump_stack_print_info.cold.1+0x20/0x20 [ 264.370879] dump_header+0x27b/0xf72 [ 264.374615] ? mark_held_locks+0x130/0x130 [ 264.378856] ? pagefault_out_of_memory+0x197/0x197 [ 264.383781] ? __lock_acquire+0x62f/0x4c20 [ 264.388012] ? print_usage_bug+0xc0/0xc0 [ 264.392069] ? zap_class+0x640/0x640 [ 264.395773] ? zap_class+0x640/0x640 [ 264.399476] ? print_usage_bug+0xc0/0xc0 [ 264.403526] ? print_usage_bug+0xc0/0xc0 [ 264.407587] ? lock_downgrade+0x900/0x900 [ 264.411731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.417259] ? find_held_lock+0x36/0x1c0 [ 264.421318] ? mark_held_locks+0xc7/0x130 [ 264.425457] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 264.430550] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 264.435642] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 264.440217] ? trace_hardirqs_on+0xbd/0x310 [ 264.444546] ? kasan_check_read+0x11/0x20 [ 264.448691] ? ___ratelimit+0x3b4/0x672 [ 264.452658] ? trace_hardirqs_off_caller+0x310/0x310 [ 264.457756] ? trace_hardirqs_on+0x310/0x310 [ 264.462153] ? lock_downgrade+0x900/0x900 [ 264.466303] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 264.471399] ? ___ratelimit+0x3b9/0x672 [ 264.475361] ? idr_get_free+0xf70/0xf70 [ 264.479326] ? task_will_free_mem+0xb30/0xb30 [ 264.483816] ? find_held_lock+0x36/0x1c0 [ 264.487874] oom_kill_process.cold.27+0x10/0x903 [ 264.492620] ? zap_class+0x640/0x640 [ 264.496322] ? oom_badness+0xe6/0xaa0 [ 264.500115] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 264.505033] ? kasan_check_read+0x11/0x20 [ 264.509182] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 264.514450] ? oom_evaluate_task+0x540/0x540 [ 264.518848] ? find_held_lock+0x36/0x1c0 [ 264.522905] ? out_of_memory+0x974/0x1430 [ 264.527043] ? lock_downgrade+0x900/0x900 [ 264.531183] ? check_preemption_disabled+0x48/0x280 [ 264.536192] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 264.541113] ? kasan_check_read+0x11/0x20 [ 264.545249] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 264.550517] ? rcu_softirq_qs+0x20/0x20 [ 264.554485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.560012] ? oom_evaluate_task+0x302/0x540 [ 264.564412] out_of_memory+0xa84/0x1430 [ 264.568379] ? oom_killer_disable+0x3a0/0x3a0 [ 264.572860] ? pagefault_out_of_memory+0x150/0x197 [ 264.577783] ? __ww_mutex_check_waiters+0x160/0x160 [ 264.582797] ? kasan_check_read+0x11/0x20 [ 264.586931] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 264.592195] ? rcu_softirq_qs+0x20/0x20 [ 264.596157] ? trace_hardirqs_off_caller+0x310/0x310 [ 264.601250] pagefault_out_of_memory+0x172/0x197 [ 264.605993] ? out_of_memory+0x1430/0x1430 [ 264.610225] ? up_read_non_owner+0x100/0x100 [ 264.614645] mm_fault_error+0x1bd/0x350 [ 264.618631] ? find_vma+0x34/0x190 [ 264.622165] __do_page_fault+0xcf2/0xe60 [ 264.626232] ? trace_hardirqs_off+0xb8/0x310 [ 264.630640] do_page_fault+0xf2/0x7e0 [ 264.634438] ? vmalloc_sync_all+0x30/0x30 [ 264.638576] ? error_entry+0x70/0xd0 [ 264.642292] ? trace_hardirqs_off_caller+0xbb/0x310 [ 264.647317] ? trace_hardirqs_on_caller+0xc0/0x310 [ 264.652241] ? syscall_return_slowpath+0x5e0/0x5e0 [ 264.657162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.661997] ? trace_hardirqs_on_caller+0x310/0x310 [ 264.667019] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 264.672465] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 264.677478] ? prepare_exit_to_usermode+0x291/0x3b0 [ 264.682486] ? page_fault+0x8/0x30 [ 264.686018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.690850] ? page_fault+0x8/0x30 [ 264.694394] page_fault+0x1e/0x30 [ 264.697836] RIP: 0033:0x40688d [ 264.701041] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 49 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 08:20:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 264.719931] RSP: 002b:00007f4119bd10a0 EFLAGS: 00010206 [ 264.725282] RAX: 0000000000406880 RBX: 00007f4119bd2c90 RCX: 0000000000000000 [ 264.732543] RDX: 000000002000d000 RSI: 0000000000000006 RDI: 0000000000000007 [ 264.739818] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 264.747076] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f4119bd36d4 [ 264.754331] R13: 00000000004c505b R14: 00000000004d8c80 R15: 0000000000000008 08:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.840217] Mem-Info: [ 264.844002] active_anon:136658 inactive_anon:194 isolated_anon:0 [ 264.844002] active_file:8140 inactive_file:36974 isolated_file:0 [ 264.844002] unevictable:0 dirty:289 writeback:0 unstable:0 [ 264.844002] slab_reclaimable:14099 slab_unreclaimable:109035 [ 264.844002] mapped:55231 shmem:245 pagetables:1277 bounce:0 [ 264.844002] free:1223366 free_pcp:819 free_cma:0 [ 264.900163] Node 0 active_anon:550840kB inactive_anon:776kB active_file:32560kB inactive_file:147896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221024kB dirty:1156kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 08:20:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 264.939688] audit: type=1804 audit(1544343651.650:66): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir559728470/syzkaller.H2QFNJ/63/file0" dev="sda1" ino=16743 res=1 [ 264.992960] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.021164] lowmem_reserve[]: 0 2818 6321 6321 [ 265.025941] Node 0 DMA32 free:2887356kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888780kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1424kB local_pcp:72kB free_cma:0kB [ 265.057203] lowmem_reserve[]: 0 0 3503 3503 08:20:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x6b6b6b00, 0x0, 0x0, 0x0) 08:20:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x200) ioctl$BLKRRPART(r2, 0x125f, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) listen(r1, 0x0) [ 265.065068] Node 0 Normal free:1995044kB min:37364kB low:46704kB high:56044kB active_anon:544488kB inactive_anon:776kB active_file:32560kB inactive_file:147896kB unevictable:0kB writepending:1156kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7520kB pagetables:5108kB bounce:0kB free_pcp:1952kB local_pcp:1128kB free_cma:0kB [ 265.080263] audit: type=1804 audit(1544343651.680:67): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir559728470/syzkaller.H2QFNJ/63/file0" dev="sda1" ino=16743 res=1 [ 265.157454] lowmem_reserve[]: 0 0 0 0 [ 265.161486] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 08:20:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x800000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 265.197263] Node 0 DMA32: 3*4kB (M) 0*8kB 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 703*4096kB (M) = 2887356kB [ 265.260552] Node 0 Normal: 7609*4kB (UME) 1285*8kB (UME) 792*16kB (UME) 413*32kB (UME) 126*64kB (UME) 28*128kB (UME) 18*256kB (UME) 30*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 463*4096kB (UM) = 2001836kB [ 265.295994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.313126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 265.321904] 45357 total pagecache pages [ 265.321922] 0 pages in swap cache [ 265.321935] Swap cache stats: add 0, delete 0, find 0/0 [ 265.345149] Free swap = 0kB [ 265.351169] Total swap = 0kB [ 265.355992] 1965979 pages RAM 08:20:52 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:52 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/23, 0x17}], 0x5, &(0x7f0000000700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/11, 0xb}, {&(0x7f00000006c0)=""/44, 0x2c}], 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) write$selinux_load(0xffffffffffffffff, 0x0, 0xfffffe9d) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB="bce2dd8ad002e47ef84ce5892d661d559de086602b8d3661eefbbf5df692337374cc08fa9b51d7f28c1cdd61cddaf33f1c31979e6722482f24e000083e60b37143a30a0656ab6a6efb926f88d8f0c3be2ec5b894015d0d457d6a5fe3a6d6df26d9defdde8acf0f1e827fe7ac88d008c778d3b4be619e3a3845edd8a6f325eab58ac776f6ac67b4fbeb11b8fe397e78b6d2f6a18f3843c0e2fd4e620b5247f5b76c855c39964f59102d000000ed000000000000000000"], &(0x7f00000008c0)=0xc4) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x20000) 08:20:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8200, 0xefe6, 0x3, r3}, 0x10) 08:20:52 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f00000000c0)=0x54) getegid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="bd6614d6c196984f61942826c6ee6603d85303ff72d839d94aaf8d07a4f29933a25dabeae64a64b8caa413", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x1}, 0x8) 08:20:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xffffffffa0008000, 0x0, 0x0, 0x0) [ 265.365778] 0 pages HighMem/MovableOnly [ 265.371453] 342853 pages reserved [ 265.374951] 0 pages cma reserved [ 265.378624] Out of memory: Kill process 9069 (syz-executor5) score 1005 or sacrifice child 08:20:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x191, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x4000000000, 0x0, 0x0, 0x0) 08:20:52 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0x0) 08:20:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9101000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xa0008000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x600, 0x0, 0x0, 0x0) 08:20:52 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/23, 0x17}], 0x5, &(0x7f0000000700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/11, 0xb}, {&(0x7f00000006c0)=""/44, 0x2c}], 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) write$selinux_load(0xffffffffffffffff, 0x0, 0xfffffe9d) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB="bce2dd8ad002e47ef84ce5892d661d559de086602b8d3661eefbbf5df692337374cc08fa9b51d7f28c1cdd61cddaf33f1c31979e6722482f24e000083e60b37143a30a0656ab6a6efb926f88d8f0c3be2ec5b894015d0d457d6a5fe3a6d6df26d9defdde8acf0f1e827fe7ac88d008c778d3b4be619e3a3845edd8a6f325eab58ac776f6ac67b4fbeb11b8fe397e78b6d2f6a18f3843c0e2fd4e620b5247f5b76c855c39964f59102d000000ed000000000000000000"], &(0x7f00000008c0)=0xc4) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x20000) 08:20:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:52 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000140)) syslog(0x9, 0xfffffffffffffffe, 0xfffffffffffffced) [ 266.240082] audit: type=1400 audit(1544343652.950:68): avc: denied { syslog } for pid=9169 comm="syz-executor3" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 08:20:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x101, 0xffffffff}, &(0x7f00000007c0)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={r2, @in6={{0xa, 0x4e20, 0x1, @empty, 0x92b7}}, 0xffffffff, 0x100000000, 0x7, 0x80000001, 0x4}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x8, 0x9, 0x3f}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000480)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r4, 0x10, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0xb}, 0x80}}}, 0xa0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000800)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000740)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000780)={r5, r6}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000689000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0xffffffffffffff04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840), 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1000}, 0x8) mkdir(&(0x7f0000b8f000)='./file0\x00', 0x0) rt_sigaction(0x38, &(0x7f00000004c0)={&(0x7f0000000440)="c46185d2b5e96871fbc481a96b0c77660f5487f10b00008f6850ceb20000000007c44145df99f1ffffff85fc0f01d7646526f243a68f89d09b14da660fe75100", {0x4}, 0x7ffffffd, &(0x7f0000000000)="36660fef0f40c17e9cae0faaea68adad437d04f90bc4c275b8268fc830cf22128f49300119c4e1c059fc6644a7f243c042b467"}, &(0x7f0000000580)={&(0x7f0000000500)="c421fd2fecc44265b9e6664781c8e0e0d9fe260f01de664b0f3a2236000fee8a001000026566410f8800000000c441fa2dfd66f390", {}, 0x0, &(0x7f0000000540)="c4437d7cf10064260f11d2c4c2d9ba2e81c387000000cfc4a17d291865f0440fc70dde0c0000c4037d0ca8f4ffffff0d8f8978e171803e4f0fc720"}, 0x0, 0x0) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000b99e7d)='./file0\x00', 0x8) inotify_rm_watch(r7, r8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 08:20:53 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x8000000000, 0x0, 0x0, 0x0) 08:20:53 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/23, 0x17}], 0x5, &(0x7f0000000700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/11, 0xb}, {&(0x7f00000006c0)=""/44, 0x2c}], 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) write$selinux_load(0xffffffffffffffff, 0x0, 0xfffffe9d) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB="bce2dd8ad002e47ef84ce5892d661d559de086602b8d3661eefbbf5df692337374cc08fa9b51d7f28c1cdd61cddaf33f1c31979e6722482f24e000083e60b37143a30a0656ab6a6efb926f88d8f0c3be2ec5b894015d0d457d6a5fe3a6d6df26d9defdde8acf0f1e827fe7ac88d008c778d3b4be619e3a3845edd8a6f325eab58ac776f6ac67b4fbeb11b8fe397e78b6d2f6a18f3843c0e2fd4e620b5247f5b76c855c39964f59102d000000ed000000000000000000"], &(0x7f00000008c0)=0xc4) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x20000) 08:20:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xffff8000, 0x0, 0x0, 0x0) 08:20:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x5, 0x400003}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:20:53 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000002c0)=0x0) ptrace(0x8, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000180)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x20000, r2, &(0x7f0000000000), 0xfffffce4}]) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000003c0)={0xfffffffffffffffa}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000340)={0xc, 0x102, 0x0, {0x0, 0xff, 0x81, 0x1}}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x3, 0x115a53f4}) 08:20:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:53 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x10000c0, 0x0, 0x0, 0x0) 08:20:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x400000000000, 0x0, 0x0, 0x0) 08:20:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x101, 0xffffffff}, &(0x7f00000007c0)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={r2, @in6={{0xa, 0x4e20, 0x1, @empty, 0x92b7}}, 0xffffffff, 0x100000000, 0x7, 0x80000001, 0x4}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x8, 0x9, 0x3f}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000480)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r4, 0x10, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0xb}, 0x80}}}, 0xa0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000800)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000740)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000780)={r5, r6}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000689000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0xffffffffffffff04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840), 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1000}, 0x8) mkdir(&(0x7f0000b8f000)='./file0\x00', 0x0) rt_sigaction(0x38, &(0x7f00000004c0)={&(0x7f0000000440)="c46185d2b5e96871fbc481a96b0c77660f5487f10b00008f6850ceb20000000007c44145df99f1ffffff85fc0f01d7646526f243a68f89d09b14da660fe75100", {0x4}, 0x7ffffffd, &(0x7f0000000000)="36660fef0f40c17e9cae0faaea68adad437d04f90bc4c275b8268fc830cf22128f49300119c4e1c059fc6644a7f243c042b467"}, &(0x7f0000000580)={&(0x7f0000000500)="c421fd2fecc44265b9e6664781c8e0e0d9fe260f01de664b0f3a2236000fee8a001000026566410f8800000000c441fa2dfd66f390", {}, 0x0, &(0x7f0000000540)="c4437d7cf10064260f11d2c4c2d9ba2e81c387000000cfc4a17d291865f0440fc70dde0c0000c4037d0ca8f4ffffff0d8f8978e171803e4f0fc720"}, 0x0, 0x0) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000b99e7d)='./file0\x00', 0x8) inotify_rm_watch(r7, r8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 08:20:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:53 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@alg, &(0x7f0000000140)=0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000001c0)={0x5, @dev={[], 0xd}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x3c, 0x0, &(0x7f0000000000)=0xffffffffffffffd2) 08:20:53 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/23, 0x17}], 0x5, &(0x7f0000000700)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/11, 0xb}, {&(0x7f00000006c0)=""/44, 0x2c}], 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) write$selinux_load(0xffffffffffffffff, 0x0, 0xfffffe9d) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB="bce2dd8ad002e47ef84ce5892d661d559de086602b8d3661eefbbf5df692337374cc08fa9b51d7f28c1cdd61cddaf33f1c31979e6722482f24e000083e60b37143a30a0656ab6a6efb926f88d8f0c3be2ec5b894015d0d457d6a5fe3a6d6df26d9defdde8acf0f1e827fe7ac88d008c778d3b4be619e3a3845edd8a6f325eab58ac776f6ac67b4fbeb11b8fe397e78b6d2f6a18f3843c0e2fd4e620b5247f5b76c855c39964f59102d000000ed000000000000000000"], &(0x7f00000008c0)=0xc4) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x20000) 08:20:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:53 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0x4020565b, &(0x7f0000000180)) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 08:20:53 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x80000) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x43, 0x62}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$P9_RLERRORu(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x27) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x3000, 0x8800000) 08:20:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x1d00008000000000, 0x0, 0x0, 0x0) 08:20:53 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xfcfdffff, 0x0, 0x0, 0x0) 08:20:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb00000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x1000080, 0x0, 0x0, 0x0) 08:20:54 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x6}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000600)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000440)={0x0, 0x0}) sendmsg$nl_netfilter(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0xf, 0x5, 0x3, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x1}, [@generic="8c024266e52e444145011291bab1f1fb7d51a194d63084c945b48a9e7182201727cee93b8b750c655ec0da6bc09f59848ab5d40393c7b0dee1bc0af4f9800cdcb5eb93d90fa5cf759a3ddf7e4b1cd4a3ed51c630030e"]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000480)={r3, r4}) close(r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000380)={0xfffffff, 0x8, 0x20, [], &(0x7f0000000340)={0x9a0901, 0x0, [], @value=0x1000}}) r7 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f00000002c0)={0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {}, {}, {0x0, 0x0, 0x0, @link_local}]}) rt_sigqueueinfo(r5, 0xd, &(0x7f0000000080)={0x34, 0x1, 0xd65, 0x59c8abc7}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000640)) 08:20:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:54 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xfffffdfc, 0x0, 0x0, 0x0) 08:20:54 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f0000000100)='./file0/bus\x00', 0x41, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="cf332f41167a090f76a03b7065df15d20acc5d2161130af7080ce1a39f4a5919ae46bf713e799520b76b5f3f6c95d07c8fc9c1c4dc35b2755dbb37f69476cd5b86184e621bf8fbf7ec2f4d4a3440aba6a94fa898c24728"], &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000000180)="cae2479c7e") 08:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000010, &(0x7f0000000000)="02", 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1000084, 0x4) 08:20:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x2000, 0x0, 0x0, 0x0) 08:20:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000480), &(0x7f0000000400)=ANY=[]}, 0x78) r1 = socket$inet6(0xa, 0x2, 0xfffffffffffff0ae) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x3908, @ipv4={[], [], @multicast2}}, 0x1c) 08:20:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000002680)={0x24, 0x2a, 0x1, 0x0, 0x0, {0x2}, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @str='IPVS\x00'}]}]}, 0x24}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x504, 0xc, 0xd, 0x102, 0x70bd25, 0x25dfdbff, {0x3, 0x0, 0x2}, [@generic="e52eaea6fbceba7c00649a0a0ae2a36de57fdfcc5ab217950d874abd9e843512285fa036e4161a06873e780803d237d26f67fe4165eb13a363e9ffa07654a3d6060f01468cde2927152d24e9ce3ba4dd3db663cc12bc2d9a746f88cf768639ebbae8a4389a0f32ea48f9f3e51d598f1352c93d059b5823aa868a3a0f1184f4a5664af3144d880da84bf9d4989c7c1d975d5b30ac0143f64c9c14d48b09479fa9921ffb65e20c22ba9d50c314bd89143bfba4cbd882bd3132c8", @typed={0x4, 0x31}, @generic="798a0554b6188b2f313eecb8892ba34827aafd6759fbbb4cbfaedaa34ffcbd1cf7f0d8e80d642b2fbcf242f4ed71706a53f260ec1f0d07fd6ab3998b61472556b0b36f4fc7270193c42b8d30cbddd8feb074930c4335da2cc5b9d4e53432ff41955753851658ead18afdda6f2a04f3ad7b6463bd8e99aec81ccfb23c50fccca19d687756494a44663f53c1288a2d8b33677419a03ac00017d306bddc4087ff573a594a6ca86cace51b4bddcbb0b31156c509ca8f636d4faa3413b4b9444c3d73cd83d7944d5033359d57fe6ce3d4164fa851f64501a9f785481d7962", @typed={0x8, 0x90, @uid=r1}, @typed={0x8, 0x4c, @uid=r2}, @nested={0x160, 0x2a, [@generic="a6af4e7a61c02e2595db459034ea5276f1376f7f132bb3df724138a6b116fa9cb094b7cf4e26a510248fdcd2b59ba773f6a785e47477811966fd2178671eb600b4d34fd8586ecaa1ae5a21050f80b52657fcd5d038087794a074255d539edfaa8001ddd59ca914f8b94ec1a30e5f4659bf310330", @generic="4e90e2062eefcd727efc43a8a580f69f6070f3d59486a2f7f8cea1ba950b86512ff4e5b73a50cecd0d9cc635ddb7a97578a0cde8b027726dfa2b3724574336e3e3dd960be94473911f31e9dfe6aee9142f359068d2635a858d29f924439ec8d4c8813808c5828d984027702efd408b0b372b080ee75bb63158bfcc938f3f3298cd6728a3137da3459296ebadd851f08ea9e09dfb78bc6eace6bb4559e1995d261132b895e2e1f8fe0f0005726a24de03369ca37301d33da82953675aa52f76d540983dcab84c40a0fc290e32b416b3633aa292a06a9f121c1d5aaf8e9b9706496ef0aa183e"]}, @typed={0x8, 0x90, @str='\x00'}, @typed={0xc, 0x49, @u64=0x8a}, @nested={0x1d0, 0x66, [@typed={0x14, 0x65, @ipv6=@remote}, @typed={0x4, 0x68}, @typed={0x8, 0x31, @u32=0x6}, @generic="b6b4318b9b3575fef9865bb2c99d998a4e8feac443757c8a9696f80c6e0a213e51b88d315af2eaf6bab4a6f06fbc8fc00dbda5f23596a50a5ee9a59f7934495e8a8b5727a394bfd9315340c57c784681b4df8dc5a60f00c92c963105b13b3ff2bbcf9a8a", @generic="33216e6af0773e91cd2fd2116b2045fb7d7dc8cf2c2eaf402e9504c6e02aab7cc170c0b2e799fd74f0231a7880187c5c9a29b055f03b5fc29965425a6e12a504f396bd500ae97e3a3a8b7c86c3cda82af05cc62cde49353b4d284e764ad6a33a3b30400abdadbab796a6abe2af61815c5700e55f672f35d329b3fc34c53da6cba70d75b708133ce62224946415521109764435db79dfb6a80297e0054d79e4f7c494979d01367f562c02965fb18c780b11a70e7e15008b41a7e994e8aaf646a6ef9f7ce588ee7438110cc337897503986bed591517e44551166204b57493f02bb091b0", @typed={0x14, 0x8c, @ipv6}, @typed={0xc, 0x7, @u64=0x7}, @generic="00107a0e9bbc2583664cefcc747427911c359d9f80e010f428b5603b6445889945529150643674c2bc2d45ed5058a9bd4d7cf8ddf0a7e4d0a75473374cab0c9ccdc17e"]}]}, 0x504}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 08:20:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x72, 0xd, 0x81, 0x0, 0x5, 0x2, 0xfffffffffffffffe, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x200, 0x8, 0xee, 0x3, 0x5}, &(0x7f00000001c0)=0x98) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x20) 08:20:54 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0) 08:20:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x80000007, 0x0, 0x0, 0x0) 08:20:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x7, &(0x7f0000000180)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xdd, &(0x7f0000000240)=""/221}, 0x48) 08:20:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x1f, 0xfffffffffffffffc}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) r2 = getpid() fcntl$setown(r1, 0x8, r2) [ 268.114350] audit: type=1400 audit(1544343654.820:69): avc: denied { create } for pid=9284 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 268.199090] kernel msg: ebtables bug: please report to author: Entries_size never zero 08:20:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf00000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 268.235370] audit: type=1400 audit(1544343654.820:70): avc: denied { write } for pid=9284 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 268.273511] kernel msg: ebtables bug: please report to author: Entries_size never zero 08:20:55 executing program 4: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1f, 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000089c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x20001}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x9d84, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, [0x1b515f], r2}, 0x48) 08:20:55 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000000000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@mcast1, @loopback, @mcast1, 0x0, 0x8, 0x80000000, 0xfe, 0x0, 0xc0000}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x6de3c1b372481460}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000580)={'vcan0\x00', {0x2, 0x4e24}}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000280)={0x6, 0x2, 0x8, 0xfff, 0x400, 0x8}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0xfffffffffffffffe}}, 0x38, 0x3e91def3}, &(0x7f0000000680)=0x88) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000006c0)={r4, 0x40}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff}, 0xb) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x5}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={r7, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) accept4(r2, &(0x7f0000000500)=@ethernet={0x0, @remote}, &(0x7f0000000380)=0x80, 0x80800) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x5, {{0xa, 0x4e22, 0xffffffff, @mcast1, 0x1ff}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x1633, @dev={0xfe, 0x80, [], 0xb}, 0x800}}, {{0xa, 0x4e22, 0x2, @remote, 0x3}}, {{0xa, 0x4e24, 0x3, @empty, 0x4}}]}, 0x210) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ppp\x00', 0x80000, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="73796a31a52216a337df6e0b5abae789de7539685c9d1d890136345eaf8ee48c17d0655a6300948f76967022ab1c7a9cbacbed86492af93bf4cba4f6815958ff3692cfb4270df3eb204f1d93b0574e58926a8af31d2c1fa8c16a58c5676f8576d895bcc78c2b5402"], 0x68) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1'}, 0xfffffffffffffde2) 08:20:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x730000000000, 0x0, 0x0, 0x0) [ 268.323347] audit: type=1400 audit(1544343654.990:71): avc: denied { prog_load } for pid=9299 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:20:55 executing program 3: shmget(0x2, 0x4000, 0x8000000000020, &(0x7f0000ff9000/0x4000)=nil) 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x400000000000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xd000000, 0x0, 0x0, 0x0) 08:20:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x22}]}}}]}, 0x44}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80003, 0x0) 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x3) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xfffffffffffffcb4) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x2010, r1, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0x0, 0x1, {0x2, 0x10000, 0x0, {0x6, 0xffffffff, 0x5, 0x9, 0x7, 0xfb5, 0x8000, 0x6, 0x7fffffff, 0x10000, 0xfffffffffffffff7, r2, r3, 0x5}}}, 0x78) 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xc0, 0x0, 0x0, 0x0) 08:20:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', r2}) ioctl(r0, 0x20000400008912, &(0x7f0000000080)="55682d02408b628571707b853086d64532") getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000100)=0x2ba) 08:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000006c0), 0x8) fcntl$getown(r0, 0x9) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getpid() r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x20000, 0x20) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x1ff, 0x6, 0x401, 0x3, 0x8000, 0x4, 0x96, 0x2a0, 0x0, 0x0, 0x8001, 0x0, 0x81}, {0x0, 0x0, 0x200, 0x6457, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0xffffffffffff9fe5, 0x8, 0x7}, {0x0, 0x2, 0x0, 0x5, 0xa08, 0x8001, 0x4, 0x100000000, 0x800, 0x1, 0x401, 0xffffffff, 0x57}]}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)=""/228}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000300)=""/161, 0xa1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x12000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xfcfdffff, 0x0, 0x0, 0x0) 08:20:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 08:20:55 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000010000000000000000000002000000000000be010000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000bdc2b402849"]) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r2, 0x8}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x9}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="a1c10bb59400719eedec9c28f9d6a501", 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r5, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000500)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) write$P9_RXATTRCREATE(r9, &(0x7f0000000140)={0x383}, 0x7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000480)=0x6, 0x4) write$P9_RSETATTR(r9, &(0x7f0000000040)={0x7}, 0x7) sendfile(r6, r9, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) write(r3, &(0x7f00000002c0)="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", 0xff) [ 268.926713] audit: type=1400 audit(1544343655.630:72): avc: denied { read } for pid=9362 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:55 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x8000080, 0x0, 0x0, 0x0) 08:20:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x700008000000000, 0x0, 0x0, 0x0) 08:20:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfcffffff00000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:56 executing program 3: r0 = getpid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200102, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x1, @loopback, 0x7175}, {0xa, 0x4e24, 0x100000001, @local, 0x1}, 0x6, [0x7, 0x5, 0x8, 0x6, 0x3f, 0xa801, 0x9, 0x2]}, 0x5c) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x40, 0x1) sched_setattr(r0, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 08:20:56 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 08:20:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 269.425396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.482982] sched: DL replenish lagged too much 08:20:56 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x34f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x140) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) 08:20:56 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x930000000000, 0x0, 0x0, 0x0) 08:20:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0) 08:20:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/41) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10300, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140006000000000000000000000000000000000014000200218000000000000000000000000000aa69517d114e3e5fc6babfcb9905f02cb43608b817f0c58e4f1aff81c364953f0a2624812cd140d6103a16d7f6baa07b746de232aaf08aa144f6d69cad25150d40130bd25b207c2881133f6947c76e50f3c61eca68182bd08d50de385cb1bd3f28b93657839ca108aecf4246d1376f80f9b69ad72998270018ce8de9016dc227180a"], 0x40}}, 0x0) [ 269.796684] audit: type=1400 audit(1544343656.500:73): avc: denied { create } for pid=9459 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 269.896137] audit: type=1804 audit(1544343656.570:74): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/60/file0" dev="sda1" ino=16769 res=1 [ 270.061572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:20:56 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000010000000000000000000002000000000000be010000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000bdc2b402849"]) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r2, 0x8}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x9}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="a1c10bb59400719eedec9c28f9d6a501", 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r5, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000500)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) write$P9_RXATTRCREATE(r9, &(0x7f0000000140)={0x383}, 0x7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000480)=0x6, 0x4) write$P9_RSETATTR(r9, &(0x7f0000000040)={0x7}, 0x7) sendfile(r6, r9, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) write(r3, &(0x7f00000002c0)="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", 0xff) 08:20:56 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x50000000, 0x0, 0x0, 0x0) 08:20:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xb, 0x0, 0x0, 0x0) 08:20:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x30}]}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f0000000100)=""/251, 0x8000000000}, 0x48) 08:20:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) 08:20:57 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xa00, 0x0, 0x0, 0x0) [ 270.416569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.509962] audit: type=1804 audit(1544343657.220:75): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/60/file0" dev="sda1" ino=16769 res=1 [ 270.614180] audit: type=1804 audit(1544343657.300:76): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/60/file0" dev="sda1" ino=16769 res=1 08:20:57 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001b00)=ANY=[@ANYBLOB="cf010073ad02000069010000ae0b00001d010000610000000000000000000000a5c4943d35eb11d22c0f6d19348513d98d672329881876d63569ec92ef2e741dbe23125355997d904d9ebfff286151e6e2e12e5b6cd2d7ac05cd478f1fa152510c9d4cb5bfc5c21e21e21571c99703421b9d172fb50b4f7540e1c58234e441cfce7a8d19bb9d8dfe4a4a4ce96d27a9f4d84b0d74403daba05deb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x34f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x140) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) 08:20:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:20:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x5000, 0x0, 0x0, 0x0) 08:20:57 executing program 3: r0 = socket$inet6(0xa, 0x8000e, 0x100000000) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1002000000016) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000440)={@pppoe={0x18, 0x0, {0x1, @local, 'gre0\x00'}}, {&(0x7f0000000380)=""/183, 0xb7}, &(0x7f0000000040), 0x2}, 0xa0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, r1}]) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0xe2fa) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="290000002000190000003fffffffda060200000000e80001060000040d000300ea1100000005000000", 0x29}], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) [ 270.855828] audit: type=1804 audit(1544343657.560:77): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/61/file0" dev="sda1" ino=16773 res=1 08:21:01 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000010000000000000000000002000000000000be010000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000bdc2b402849"]) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r2, 0x8}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x9}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="a1c10bb59400719eedec9c28f9d6a501", 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sched_setaffinity(r5, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000500)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) write$P9_RXATTRCREATE(r9, &(0x7f0000000140)={0x383}, 0x7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000480)=0x6, 0x4) write$P9_RSETATTR(r9, &(0x7f0000000040)={0x7}, 0x7) sendfile(r6, r9, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) write(r3, &(0x7f00000002c0)="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", 0xff) 08:21:01 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) 08:21:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:21:01 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000380)={0xffff, 0x400, 0x0, 0x1, 0x0, 0x5c, 0x392f, 0x0, 0x0, 0xfffffffffffffffd}) r1 = semget$private(0x0, 0x3, 0x84) semctl$GETPID(r1, 0x5, 0xb, &(0x7f0000000640)) r2 = openat(r0, &(0x7f0000000400)='./bus\x00', 0x40001, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) r3 = getgid() getgroups(0x3, &(0x7f0000000680)=[r3, 0x0, 0x0]) mkdir(&(0x7f00000004c0)='./file0\x00', 0x3) fremovexattr(r2, &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00') mount(&(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000600)='./bus\x00', 0x1d1) fcntl$setstatus(r2, 0x4, 0x2000) io_setup(0x48000, &(0x7f0000000440)=0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)=0x40) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000, 0x407000}]) lseek(r4, 0x0, 0x3) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="ee8008650c000e52909a9967ffc3", 0xe}, {&(0x7f0000000080)="e4a2d1d1a6693d585587bcbb7e62a5a85cae986621b58003e35bf0b2dd4034c1c5e732f983", 0x25}, {&(0x7f0000000240)="d9d850f615fc71a3ffbaa84c0ff2c0bf6157aba6e2b295a943bfaedb9ed5d3dd6272d85d5b74d75e9a3718ebd1dfe7b5bad8120ada7227fde649a05b5b3fec803fbe0438c053faa6661b269237c769b3c61a3830c564eadba3faaa2f48dc41f449f005ec1070db54451962118f9da660b5439127daf23e067c3236d155f22bf173a06d1df892ec569bf0628b", 0x8c}], 0x3, 0x58) 08:21:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xc0000000, 0x0, 0x0, 0x0) 08:21:01 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x34f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x140) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) 08:21:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffff000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 274.485826] audit: type=1804 audit(1544343661.190:78): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir600441592/syzkaller.PdLNwh/62/file0" dev="sda1" ino=16780 res=1 08:21:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0) 08:21:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) fcntl$setstatus(r0, 0x4, 0x42c02) 08:21:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0xffffff7f00000000, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 08:21:01 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x8000a0ffffffff, 0x0, 0x0, 0x0) 08:21:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = dup(r1) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x101002, 0x0) io_submit(r2, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000040)="cff9dd44aaf667dc40733e594fdb60052f233feb54d40e41dd1b2a407c8ba8197960fca8f123cd4f45d15887dca200384f04c081de5c8308cc380073f3bb3373846f9678b5eebe4b793165768085d878c7731356429af8f6d8c757e547116d244125ba48ab0d55e98c2aa342446e957e8b9a213ca9", 0x75, 0x3, 0x0, 0x2, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xffffffff, r0, &(0x7f0000000240)="f972815c123b2135ba3a6e73e9a096fd2ac42d8c4f0e73f8322018fbdea9a5223f1bac866b5fc74c3d1ba97bb1a1d542d9b7f6ee95f756963572d3bc55f5d9d002f3eb1ff2b3fc03bda2bcfc17227b0b1916f3287798ce77154de0063b3dd8a9bc5d96376a48542793b051e4a5a06a3cafdf30a80be81e1c1d64c289149ab48ec8e144ed2878aba7ceb5a7f842bc7844f45bdf93982d6e560ea8f2407c88d0b8e4f5813f09ad914e37d84de69b110391619428c800be52a72cc4c7ab6836cb73b1c9ec67e0314fd4874f92c929e205b710ecfaafa2339d52eb647db621c9fe1d45610f096df682d86a985d4adee887d9", 0xf0, 0x100000001, 0x0, 0x1, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180)="5e5595c9a33bd059bf6253b474535f2b315977babbef747c", 0x18, 0x8000, 0x0, 0x2, r5}]) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000200), 0xc) [ 274.782996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.907023] rcu: INFO: rcu_preempt self-detected stall on CPU [ 379.913139] rcu: 1-....: (1 GPs behind) idle=656/1/0x4000000000000002 softirq=14877/14878 fqs=5218 [ 379.922806] rcu: (t=10500 jiffies g=14613 q=1727) [ 379.927852] NMI backtrace for cpu 1 [ 379.931465] CPU: 1 PID: 9526 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #148 [ 379.938749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.948116] Call Trace: [ 379.950683] [ 379.952833] dump_stack+0x244/0x39d [ 379.956449] ? dump_stack_print_info.cold.1+0x20/0x20 [ 379.961627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.967164] ? do_raw_spin_lock+0x14f/0x350 [ 379.971472] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 379.976137] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 379.981311] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 379.986589] arch_trigger_cpumask_backtrace+0x14/0x20 [ 379.991765] rcu_dump_cpu_stacks+0x16f/0x1bc [ 379.996163] print_cpu_stall.cold.67+0x1f3/0x3c7 [ 380.001022] ? print_other_cpu_stall+0x160/0x160 [ 380.005762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.011297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.016817] ? do_trace_rcu_torture_read+0x10/0x10 [ 380.021732] ? rcu_preempt_need_deferred_qs+0x74/0x1f0 [ 380.026993] ? __lock_is_held+0xb5/0x140 [ 380.031050] ? __rcu_read_lock+0x50/0x50 [ 380.035110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.040632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.046153] ? check_preemption_disabled+0x48/0x280 [ 380.051157] rcu_check_callbacks+0xf3b/0x13f0 [ 380.055656] ? rcutree_dead_cpu+0x10/0x10 [ 380.059788] ? lock_downgrade+0x900/0x900 [ 380.063928] ? lock_release+0x9c1/0xa00 [ 380.067887] ? zap_class+0x640/0x640 [ 380.071601] ? zap_class+0x640/0x640 [ 380.075361] ? mark_held_locks+0x130/0x130 [ 380.079581] ? zap_class+0x640/0x640 [ 380.083282] ? zap_class+0x640/0x640 [ 380.087072] ? find_held_lock+0x36/0x1c0 [ 380.091124] ? cpuacct_account_field+0x219/0x3d0 [ 380.095868] ? zap_class+0x640/0x640 [ 380.099569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.105090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.110610] ? check_preemption_disabled+0x48/0x280 [ 380.115617] ? trace_hardirqs_off+0xb8/0x310 [ 380.120007] ? __lock_is_held+0xb5/0x140 [ 380.124060] ? trace_hardirqs_on+0x310/0x310 [ 380.128455] ? check_preemption_disabled+0x48/0x280 [ 380.133471] ? raise_softirq+0x199/0x420 [ 380.137515] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 380.142168] ? account_system_index_time+0x333/0x5d0 [ 380.147255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.152793] ? check_preemption_disabled+0x48/0x280 [ 380.157798] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.163318] ? hrtimer_run_queues+0x9a/0x400 [ 380.167808] ? run_local_timers+0x19b/0x230 [ 380.172113] ? timer_clear_idle+0x90/0x90 [ 380.176244] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 380.184858] ? account_process_tick+0x282/0x350 [ 380.189522] update_process_times+0x2d/0x70 [ 380.193829] tick_sched_handle+0x9f/0x180 [ 380.197966] tick_sched_timer+0x45/0x130 [ 380.202015] __hrtimer_run_queues+0x41c/0x10d0 [ 380.206589] ? tick_sched_do_timer+0x1a0/0x1a0 [ 380.211157] ? hrtimer_start_range_ns+0xe00/0xe00 [ 380.216337] ? pvclock_read_flags+0x160/0x160 [ 380.220831] ? trace_hardirqs_on+0x310/0x310 [ 380.225247] ? kvm_clock_read+0x18/0x30 [ 380.229231] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 380.234321] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 380.239676] ? do_timer+0x50/0x50 [ 380.243113] ? rwlock_bug.part.2+0x90/0x90 [ 380.247331] ? trace_hardirqs_on+0x310/0x310 [ 380.251729] ? rcu_softirq_qs+0x20/0x20 [ 380.255699] hrtimer_interrupt+0x313/0x780 [ 380.259929] smp_apic_timer_interrupt+0x1a1/0x760 [ 380.264754] ? smp_reschedule_interrupt+0x109/0x650 [ 380.269845] ? smp_call_function_single_interrupt+0x650/0x650 [ 380.275713] ? interrupt_entry+0xb5/0xc0 [ 380.279774] ? trace_hardirqs_off_caller+0xbb/0x310 [ 380.284773] ? trace_hardirqs_off_caller+0xbb/0x310 [ 380.289864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.294692] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.299693] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.304694] ? task_prio+0x50/0x50 [ 380.308223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.313748] ? check_preemption_disabled+0x48/0x280 [ 380.318751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.323583] apic_timer_interrupt+0xf/0x20 [ 380.327801] [ 380.330024] RIP: 0010:_raw_spin_unlock_irq+0x56/0x80 [ 380.335118] Code: 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 32 48 83 3d c3 10 77 01 00 74 1f fb 66 0f 1f 44 00 00 01 00 00 00 e8 c0 bb 7a f9 65 8b 05 79 fd 26 78 85 c0 74 05 5b [ 380.354002] RSP: 0018:ffff8881839eec68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 380.361691] RAX: dffffc0000000000 RBX: ffff8881daf2cc80 RCX: 1ffff110308f058c [ 380.368942] RDX: 1ffffffff12a4020 RSI: 0000000000000000 RDI: ffffffff89520100 [ 380.376194] RBP: ffff8881839eec70 R08: ffff888184782c60 R09: 0000000000000006 [ 380.383451] R10: 0000000000000000 R11: ffff8881847823c0 R12: ffff8881847829e0 [ 380.390704] R13: ffffffff882b07a0 R14: ffff8881daf2cc80 R15: ffff8881847823c0 [ 380.397976] ? _raw_spin_unlock_irq+0x27/0x80 [ 380.402459] __schedule+0x168a/0x21d0 [ 380.406246] ? mark_held_locks+0x130/0x130 [ 380.410466] ? __sched_text_start+0x8/0x8 [ 380.414597] ? _raw_spin_unlock_irq+0x27/0x80 [ 380.419076] ? _raw_spin_unlock_irq+0x27/0x80 [ 380.423557] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 380.428131] ? zap_class+0x640/0x640 [ 380.431847] ? trace_hardirqs_on+0xbd/0x310 [ 380.436160] ? kasan_check_read+0x11/0x20 [ 380.440304] ? __schedule+0x168a/0x21d0 [ 380.444261] ? print_usage_bug+0xc0/0xc0 [ 380.448393] ? lock_pin_lock+0x350/0x350 [ 380.452463] ? find_held_lock+0x36/0x1c0 [ 380.456515] schedule+0xfe/0x460 [ 380.459867] ? lock_downgrade+0x900/0x900 [ 380.463998] ? __schedule+0x21d0/0x21d0 [ 380.467974] ? kasan_check_read+0x11/0x20 [ 380.472113] ? do_raw_spin_unlock+0xa7/0x330 [ 380.476510] ? do_raw_spin_trylock+0x270/0x270 [ 380.481074] ? lock_pin_lock+0x350/0x350 [ 380.485122] do_sched_yield+0x1bf/0x2a0 [ 380.489094] ? ttwu_do_activate+0x1f0/0x1f0 [ 380.493426] ? _raw_spin_unlock_bh+0x30/0x40 [ 380.497825] yield+0xb3/0xe0 [ 380.500828] ? schedule+0x460/0x460 [ 380.504441] ? dev_deactivate_many+0x5c9/0xdd0 [ 380.509035] ? __local_bh_enable_ip+0x160/0x260 [ 380.513691] dev_deactivate_many+0x5d3/0xdd0 [ 380.518087] ? qdisc_free_cb+0x20/0x20 [ 380.521973] ? rtnl_is_locked+0xb5/0xf0 [ 380.525931] ? rtnl_trylock+0x20/0x20 [ 380.529717] ? netpoll_poll_disable+0x190/0x260 [ 380.534372] ? raw_notifier_call_chain+0x2d/0x40 [ 380.539130] __dev_close_many+0x197/0x380 [ 380.543263] ? netdev_notify_peers+0x1d0/0x1d0 [ 380.547832] ? lock_downgrade+0x900/0x900 [ 380.551987] dev_close_many+0x2df/0x860 [ 380.555945] ? find_held_lock+0x36/0x1c0 [ 380.559993] ? dev_fill_metadata_dst+0x840/0x840 [ 380.564735] ? add_timer+0x629/0x15a0 [ 380.568522] ? lock_downgrade+0x900/0x900 [ 380.572655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.578177] ? check_preemption_disabled+0x48/0x280 [ 380.583178] ? trace_hardirqs_off+0xb8/0x310 [ 380.587569] ? kasan_check_read+0x11/0x20 [ 380.591718] ? do_raw_spin_unlock+0xa7/0x330 [ 380.596126] ? trace_hardirqs_on+0x310/0x310 [ 380.600522] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.606043] ? rtnl_is_locked+0xb5/0xf0 [ 380.610000] ? rtnl_trylock+0x20/0x20 [ 380.613790] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 380.618878] rollback_registered_many+0x543/0x1250 [ 380.623795] ? zap_class+0x640/0x640 [ 380.627495] ? generic_xdp_install+0x590/0x590 [ 380.632064] ? mark_held_locks+0x130/0x130 [ 380.636285] ? mark_held_locks+0x130/0x130 [ 380.640523] ? zap_class+0x640/0x640 [ 380.644223] ? print_usage_bug+0xc0/0xc0 [ 380.648268] ? print_usage_bug+0xc0/0xc0 [ 380.652312] ? zap_class+0x640/0x640 [ 380.656030] ? print_usage_bug+0xc0/0xc0 [ 380.660103] ? find_held_lock+0x36/0x1c0 [ 380.664154] ? mark_held_locks+0xc7/0x130 [ 380.668288] rollback_registered+0x1e9/0x420 [ 380.672677] ? lockdep_hardirqs_on+0x3a1/0x5b0 [ 380.677241] ? rollback_registered_many+0x1250/0x1250 [ 380.682414] ? trace_hardirqs_on+0xbd/0x310 [ 380.686737] ? linkwatch_schedule_work+0x150/0x170 [ 380.691652] ? trace_hardirqs_off_caller+0x310/0x310 [ 380.696741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.702259] ? rtnl_is_locked+0xb5/0xf0 [ 380.706215] ? rtnl_trylock+0x20/0x20 [ 380.710108] ? queue_delayed_work_on+0x130/0x1f0 [ 380.714865] unregister_netdevice_queue+0x321/0x5e0 [ 380.719870] ? rollback_registered+0x420/0x420 [ 380.724436] ? linkwatch_schedule_work+0x170/0x170 [ 380.729351] ? tun_setup+0x2d0/0x2d0 [ 380.733051] ? netif_set_real_num_tx_queues+0x10d/0x710 [ 380.738396] ? __tun_detach+0x6ba/0x15c0 [ 380.742446] __tun_detach+0x11b8/0x15c0 [ 380.746403] ? __call_rcu.constprop.55+0x3ea/0x950 [ 380.751319] ? __call_rcu.constprop.55+0x3ea/0x950 [ 380.756254] ? tun_attach+0x1900/0x1900 [ 380.760211] ? trace_hardirqs_off_caller+0x310/0x310 [ 380.765297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.770816] ? locks_remove_posix+0x47d/0x840 [ 380.775411] ? vfs_lock_file+0xe0/0xe0 [ 380.779283] ? zap_class+0x640/0x640 [ 380.782984] ? fsnotify+0x50e/0xef0 [ 380.786619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.792147] ? locks_remove_file+0x3c6/0x5c0 [ 380.796632] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 380.802154] ? ima_file_free+0x132/0x650 [ 380.806200] ? __lock_is_held+0xb5/0x140 [ 380.810247] ? __tun_detach+0x15c0/0x15c0 [ 380.814379] ? __tun_detach+0x15c0/0x15c0 [ 380.818620] tun_chr_close+0xe3/0x180 [ 380.822412] __fput+0x385/0xa30 [ 380.825679] ? get_max_files+0x20/0x20 [ 380.829548] ? trace_hardirqs_on+0xbd/0x310 [ 380.833871] ? kasan_check_read+0x11/0x20 [ 380.838009] ? task_work_run+0x1af/0x2a0 [ 380.842057] ? trace_hardirqs_off_caller+0x310/0x310 [ 380.847146] ? filp_close+0x1cd/0x250 [ 380.850934] ____fput+0x15/0x20 [ 380.854195] task_work_run+0x1e8/0x2a0 [ 380.858067] ? task_work_cancel+0x240/0x240 [ 380.862371] ? copy_fd_bitmaps+0x210/0x210 [ 380.866590] ? do_syscall_64+0x9a/0x820 [ 380.870554] exit_to_usermode_loop+0x318/0x380 [ 380.875125] ? __bpf_trace_sys_exit+0x30/0x30 [ 380.879608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.885139] do_syscall_64+0x6be/0x820 [ 380.889018] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.894384] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.899300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.904141] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.909144] ? prepare_exit_to_usermode+0x291/0x3b0 [ 380.914165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.919008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.924200] RIP: 0033:0x411111 [ 380.927378] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 380.946261] RSP: 002b:00007ffcfc67ed90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 380.953964] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411111 [ 380.961220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 380.968471] RBP: 0000000000000000 R08: ffffffff8139dba9 R09: 0000000072e77ec7 [ 380.975726] R10: 00007ffcfc67ecc0 R11: 0000000000000293 R12: 0000000000000000 [ 380.982989] R13: 0000000000000001 R14: 0000000000000048 R15: 0000000000000005 [ 380.990259] ? __virt_addr_valid+0x119/0x230