803ee47c3be1c54501f24a37a1b5c840ac6d4d8bfbea3606811de5cd59ccf0d9778c2938696a94706a715f7bb0ffa8c600059ba86b157bbd4f55d5a60f5699cde8f3ab76a2f835f7510a650c6e895e0d6ab4443c36cc29d41315ed5059baea42ccf2488b2faeb0046bfe62ab67e20abd21a1df1a9c698119dd6e7c9786eae29639b2032d1c8a540a49be6f0e7642928b01682a4b22ed3cc65800e0e8c3efa97f0a907bfd25b755f17a11f0f315c9c24a14f55115722118d688264afaafff1cb7fd71b2c7b20217", @ANYRESHEX], 0x147) fallocate(r4, 0x0, 0x0, 0x8020001) writev(r4, &(0x7f0000000180)=[{&(0x7f0000001780)="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", 0xfffffffffffffdab}], 0x1) socket$inet6(0xa, 0x80002, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001740)={{r11, r12/1000+30000}, {0x77359400}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x20) getsockopt(r2, 0x3, 0x1000, &(0x7f0000000640)=""/229, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) [ 659.473122] binder: 16984:17005 ioctl c0306201 20000000 returned -14 [ 659.480555] binder: 16984:16996 ioctl c0306201 20000000 returned -14 13:41:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={{0x1f, 0x24, 0x3b, 0x32, 0x26, 0x6}, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x3, 0x0, 0x2, 0x7666730f}, 0x6, 0x578, 0x885}) 13:41:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r4, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r5 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x0, 0x2) recvfrom$ax25(r5, &(0x7f0000000400)=""/164, 0xa4, 0x101, &(0x7f00000004c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default]}, 0x48) 13:41:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0xfffffffffffffd66}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 659.557221] binder: 16982:17016 ioctl c0306201 20000000 returned -14 [ 659.686497] audit: type=1400 audit(1574516489.551:113): avc: denied { sys_admin } for pid=17014 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 659.769635] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.810878] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.823829] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.870411] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.878274] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.910647] binder: 17014:17034 ioctl c0306201 20000000 returned -14 [ 659.931510] IPVS: ftp: loaded support on port[0] = 21 13:41:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000040)="9df94cc0ad7584f8b647c082c811a28cab0742d4d79996084c34a09d89fecb9018c28854f9e64441edd85260dd678aeab389a8af3f97d0a7ef05f4d1f23717902f0c934b60d9bdbeb1bb617cfe") sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x30c4}, 0x20000080) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) ioctl$SIOCRSACCEPT(r5, 0x89e3) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x200, 0x0) openat$cgroup(r7, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) ioctl$void(r6, 0x5450) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ptrace$poke(0x5, 0x0, &(0x7f0000000000), 0xfff) tkill(0x0, 0x16) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8020001) accept4$vsock_stream(r8, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80000) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:30 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffffe) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:30 executing program 4: perf_event_open(&(0x7f00000003c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7f, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) getsockopt$nfc_llcp(r2, 0x118, 0x2, &(0x7f00000001c0)=""/140, 0x8c) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40006044}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000300)="abb03f41db1f87439b4641ba55b513ab3da5f7f5264d54d95adcc0e6be68642529a435abb0dbf3f9e76213c817ff8134618ec1960882d6e21e94c22a5852fb4972718eef3d79d90d33af46923a5b2fca155fa4487f411a90175d5f65df97f87f93d9c9511607d263ee01486bb40c317be80aff6685876b39338597db1a23eec217f41986356303c962a0b2c05eed6e0db8852025", 0x94) 13:41:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) bind$ax25(r4, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 13:41:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r4, 0x0, 0x0, 0x6, 0x8}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 660.203114] binder: 17042:17048 ioctl c0306201 20000000 returned -14 [ 660.230632] binder: 17042:17048 ioctl c0306201 20000000 returned -14 13:41:30 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) timerfd_gettime(r0, &(0x7f00000003c0)) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x80, 0x0) write$apparmor_exec(r3, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x10}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) [ 660.289467] audit: type=1400 audit(1574516490.151:114): avc: denied { getopt } for pid=17041 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 660.373793] binder: 17042:17056 ioctl c0306201 20000000 returned -14 [ 660.409960] binder: 17014:17065 ioctl c0306201 20000000 returned -14 13:41:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)=0x66) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/131) [ 660.418389] binder: 17042:17062 ioctl c0306201 20000000 returned -14 [ 660.421853] binder: 17014:17066 ioctl c0306201 20000000 returned -14 [ 660.445702] binder: 17014:17067 ioctl c0306201 20000000 returned -14 [ 660.541956] binder: 17045:17050 ioctl c0306201 20000000 returned -14 13:41:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000003c0), 0x4) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x140000) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f00000001c0)={0x72, ""/114}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x200000) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8220, 0x0) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}], 0x2, 0x80000000, &(0x7f0000000400)={0x1ff}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x8) write$apparmor_exec(r3, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x10, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:30 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) keyctl$set_timeout(0xf, 0x0, 0x8000) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, &(0x7f0000000380)=@ipx, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x70, 0x7f, 0x1, 0x9, 0x4, 0x0, 0x10, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6099b8c73fe83b25, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x1, 0x7, 0x2, 0x0, 0x1ff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socket(0x0, 0x800000003, 0x0) r1 = open(&(0x7f0000000400)='./file0/f.le.\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x4) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000018b0008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 13:41:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) getrusage(0xfffffffffffffffe, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) perf_event_open(0x0, r0, 0x1000000000, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) io_submit(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1a8) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000007c0)='/devO\vcs#\x00', 0x0, 0x200080) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1a8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/capi/capi20\x00', 0x101000, 0x0) eventfd(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x1a8) syz_open_dev$cec(0x0, 0x0, 0x2) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001f80)=[0x0]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 13:41:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = creat(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="2fd8576167a9ba92cf2d7b34ec555f0dbdcd3650f9e41ef0fe5baae0fe9f3ac282c3685fc3fcfa1d98459ad40c3ff9943c3afe52f014a7dcbb94a5bc4a898d99984015b5b33479146d229c5adba048162f172b6b2b57912fbff963ea85dc79e5c5d0bb6885d60ec74a68d07000f4e2005982577e36ec65f0b72591815a00"/141, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f00000001c0)={0x9, 0xc7}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xffffffff, 0x8001, 0x8}, &(0x7f0000000180)=0x14) [ 660.851201] binder: 17086:17094 ioctl c0306201 20000000 returned -14 13:41:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f00000000c0)=0x9) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="605b85168f15000000000000f79f0002004420ef00ba4a92152b24e281e19d1068a1012683662aad493743bacdf8590947f1f11445a8cd305687e5b874f87cb0501a05b99a36781399f89930fa61f36e865eff25bf26abe91a9b5aba91181ea4ae297e54d04daf12f7d6b3e15e7a9283c9b84abb4bae6400587d427e3253e080bfa518", @ANYRES16=r5, @ANYBLOB="120325bd7000fddbdf250100000014000900fe8000000000000000000000000000aa1400070000000000000000000000040000000000080001004e2200000400050008000a004e210000080002000a00000008000600e0000001"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x15188090}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, 0x0, 0xaa764a6237237ba8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f0000000240)) 13:41:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ptrace$cont(0x20, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='stat\x00') 13:41:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6, &(0x7f0000000100)=0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r7) r8 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire], 0x48, 0x0, &(0x7f00000003c0)="2a75ff54e846874a1dad5ac57691b06c26f63024ddcc30723f2bc69163246c4dfa799dd07d85b53fb42c684a6f7c57259718f23e1a864cd57281e526763b8035f6593a8f5031a2ad"}) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r5, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4000) [ 660.997104] overlayfs: filesystem on './file0' not supported as upperdir 13:41:30 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) listen(r2, 0x6) [ 661.119561] binder: 17112:17118 ioctl c0306201 20000000 returned -14 13:41:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000080)=0x8) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x606680) 13:41:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) accept$alg(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) listen(r2, 0x6) 13:41:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, [], [{0xddd, 0x80000001, 0x66, 0x7, 0xffff}, {0x1, 0x7, 0x759, 0x7fff, 0x1, 0x80}], [[], [], [], [], []]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x406, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x28, &(0x7f0000000040)}, 0x10) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf, 0x9, 0x0, 0x2000000}, 0xffffffffffffffa7) 13:41:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x805, 0x70bd27, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x30010035) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r4, 0x0, 0x4}, &(0x7f0000000080)=0xc) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 661.830132] net_ratelimit: 12 callbacks suppressed [ 661.830138] protocol 88fb is buggy, dev hsr_slave_0 [ 661.840256] protocol 88fb is buggy, dev hsr_slave_1 [ 662.070162] protocol 88fb is buggy, dev hsr_slave_0 [ 662.075334] protocol 88fb is buggy, dev hsr_slave_1 [ 662.470135] protocol 88fb is buggy, dev hsr_slave_0 [ 662.475305] protocol 88fb is buggy, dev hsr_slave_1 [ 662.480487] protocol 88fb is buggy, dev hsr_slave_0 [ 662.485715] protocol 88fb is buggy, dev hsr_slave_1 [ 662.870141] protocol 88fb is buggy, dev hsr_slave_0 [ 662.875310] protocol 88fb is buggy, dev hsr_slave_1 13:41:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x232205, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x7, 0x0, [], {0x0, @reserved}}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x800, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000140)="87810d987f960221293e0591f1c4171c1da58d90c2c4f829cb79e4037a3d3760de7f768ce27ace7a73189f8e280dd9d70ac0da5962919b01aeba8dd6da0cc88cd032a4944ff8c80274ade8a80a956e54012140c84976b7bc2ae87f8dc9bf257d72f7e51982e0ba365f38bca311f84f6b7873e2f4c1656e8fe96f55dbc7241b7db64c6cc4fca7c4", &(0x7f0000000200)="e7ee464ddfe364d3302887264636aadd6119b908c43b7550efdcfc9d469120d85c0801ce3955b9d67af71a66bc82891c4896f942853f8cc42b06dc2829e481d1d11bea4742bb6ffb097216ace85e709144df40534bf0e160294cad2a2124063976ac9de02abbee358830717d367e8b9256dda77fc1eee2cd1b"}, 0x20) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x284400, 0x80) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000300)={0x4, "28a7f41e17eae57b9e90ad155f785c6f0c06359c38ec454854e7ce1f7b921e65", 0x2a2, 0x200, 0x0, 0x2, 0x4}) r2 = syz_open_dev$vivid(&(0x7f0000000380)='/dev/video#\x00', 0x3, 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40000, 0x0) fcntl$setpipe(r3, 0x407, 0x100000000) r4 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x69) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000440)={0x6, "fa8daf5b0d90a7e666eb5a22cf599c3f2f546c436aeb582b111b5a517acd3e05", 0x2, 0x1}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x103400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000004c0)=0xe16) r6 = dup2(0xffffffffffffffff, r5) ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f0000000500)={0xffffffff, 0x104}) write(r2, &(0x7f0000000540)="14a678c898c515bb44dabf18071b3700431d10086498e700b0b26d15824b7c43ddd9d4e3514fd630cec7ca56a26eecb91440fbf437b7418923c2d39db2a702142cfd117ed71458675e5d9a5210e66d6df7b67118134774a537392114fd3547f469aef31d41706ac38fbe40b32506bdd3cf0259d264aefe7a774c810b32feb8e184453af9bbe0a528949e4cf0dfbebd57decca9726e8ca139cf7b34ff6bca2ff5f4c4bb05bea0816ae8f158f3dd1ad381739ca8cc59e90b3faf7707546feaf9b7571d28b9e0", 0xc5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000680)=""/131) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000740)={0x1, 0x26, "ce0cf275e7b7dece4c5944b8358fa1d8a567bb0ceb74279b6a4bfa6fce87bd25b0f635a60024"}) r8 = open(&(0x7f0000000780)='./file0\x00', 0x484181, 0x2) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f00000007c0), 0x4) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x80040, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0xa7, &(0x7f0000000840)=0x3880, 0x4) r10 = syz_open_dev$sndpcmc(&(0x7f0000000880)='/dev/snd/pcmC#D#c\x00', 0x3, 0x1) openat$cgroup(r10, &(0x7f00000008c0)='syz1\x00', 0x200002, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000940)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40080014}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r11, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x2000c000) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000a40)={0x1, 0x5, 0x9, 0xffff8001}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) unlink(&(0x7f0000000ac0)='./file0\x00') 13:41:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x16) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={[], 0x401, 0xff, 0x5, 0x9, 0xd2, r4}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x7, {{0x6, 0x1, 0x5, 0x0, 0x200, 0x6, {0x4, 0x1f, 0x9, 0x25b2, 0x3, 0x2, 0xfc6b, 0x5, 0x4, 0x9, 0x7f, r7, r8, 0x40, 0x3}}, {0x0, 0x11}}}, 0xa0) 13:41:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 13:41:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) listen(r2, 0x6) 13:41:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0xffffffff}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="eeffb5feb58e0007"], 0x48}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x386, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES16=r5, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYPTR, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x80d) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x1, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r9, 0x0, 0x30}, 0xc) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r9, 0x0, 0xa13ef602172a1456}, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f00000004c0)={0x1, 0xa7, "1b0385f05fbe31cd93b86ba1cd168a326370d3dd9c3ac0adb83d275bf0440beb575f9ef98ab5bb17672ed14dddcfbf56170732222486ce7054fff97d6fb0c8bb42e61ca9dbfa62683f27a47298f3664b22e1e2662d206fdeceea866d2c316c3684abcd4566fb748b45a593791ab4c9c68d4e875fc092005a5fee523050d6aa4fe39ee6fa3caaa196781dcdd971169f08807fe64d05b63963d7a6475900957a9938db988b94af24"}) fallocate(r7, 0x0, 0x0, 0x8020001) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x15, 0x1, 0xaf, "61a3cb87a58de0817865b58a3cee39fd"}, 0x15, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) r13 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r13, 0x0, 0x0, 0x8020001) ioctl$USBDEVFS_CLEAR_HALT(r13, 0x80045515, &(0x7f0000000300)={0x0, 0x1}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r12, 0x4, 0x3, 0xfffffff7, 0x2468, 0x3ff}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r14, 0x5}, &(0x7f0000000200)=0x8) r15 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r15, &(0x7f0000000140), 0x4924b68, 0x0) 13:41:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f00000003c0)={0x12, 0xe00000, 0x6}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write$apparmor_exec(r3, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x80000000, 0x400880) ioctl$RTC_AIE_ON(r3, 0x7001) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) ptrace$setregs(0xffffffffffffffff, r4, 0x37ffbf, &(0x7f0000000200)="4ab9425315c29256b01edba0ca5df5e0000000000000006962000000000000006eb5dc61e900b6133bd8160b8486c207ab14ee2ed9b7718679a7") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 664.114723] binder: 17179:17187 ioctl c0306201 20000000 returned -14 [ 664.135741] binder: 17179:17187 ioctl c0306201 20000000 returned -14 13:41:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$pppoe(0x18, 0x1, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0), 0x1, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$dupfd(r4, 0x0, r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0xfe}}, 0xa) r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x200) r7 = openat(r2, &(0x7f0000000100)='./file0\x00', 0xa87e246c8696aedd, 0x4) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000180)=0x180014) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9, 0x0, 0x200000000}, 0xfffffffffffffeed) 13:41:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x20000, 0x100) memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x5301, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) getdents64(0xffffffffffffff9c, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20400, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) [ 664.304851] binder: 17208:17209 ioctl c0306201 20000000 returned -14 13:41:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x400000000000122, 0x0) recvmmsg(r1, &(0x7f0000002100)=[{{&(0x7f0000000080)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001340)=""/200, 0xc8}, 0x1a0000}, {{&(0x7f0000001440)=@generic, 0x80, &(0x7f0000001800)=[{&(0x7f00000022c0)=""/2, 0x2}, {&(0x7f0000001500)=""/37, 0x25}, {&(0x7f0000001540)=""/239, 0xef}, {&(0x7f0000001680)=""/56, 0x38}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/120, 0x78}], 0x6, &(0x7f0000001880)=""/225, 0xe1}, 0x3}, {{&(0x7f0000001980)=@sco, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/70, 0x46}, {&(0x7f0000001a80)=""/106, 0x6a}, {&(0x7f0000001b00)=""/108, 0x6c}, {&(0x7f0000001b80)=""/37, 0xffffffffffffffeb}, {&(0x7f0000001bc0)=""/238, 0xee}], 0x5, &(0x7f0000001d40)=""/31, 0x1f}, 0x1}, {{&(0x7f0000001d80)=@rc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/143, 0x8f}, {&(0x7f0000002240)=""/125, 0x7d}], 0x2}, 0x7fff}, {{&(0x7f0000001f80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002080), 0x2, &(0x7f00000020c0)=""/14, 0xe}, 0x1}], 0x5, 0x140010006, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r5, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) read$FUSE(r3, &(0x7f0000000540), 0x1000) fallocate(r2, 0x0, 0x0, 0x8020001) connect$unix(r2, &(0x7f0000000000)=@abs={0x3, 0x0, 0x4e22}, 0x6e) [ 664.349180] binder: 17208:17213 ioctl c0306201 20000000 returned -14 [ 664.863099] binder: 17179:17205 ioctl c0306201 20000000 returned -14 [ 664.864749] binder: 17179:17227 ioctl c0306201 20000000 returned -14 13:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0xfd, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5, 0x19, {0x0, 0x0, 0x20000, 0x7ff}}}}, 0x30}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000100)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x400000000000122, 0x0) connect(r3, &(0x7f0000000000)=@sco={0x1f, {0x7, 0x3f, 0x7, 0x84, 0x3}}, 0x80) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0x4}}, 0x18) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:36 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) listen(r2, 0x6) 13:41:36 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x201, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3bc5e8238ee2d0ad, 0xaef2c93f7de35d7, r0, 0x6da38000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="ab"], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'memory'}]}, 0x8) 13:41:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) recvmmsg(r2, &(0x7f00000012c0)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/145, 0x91}, 0x1f}], 0x1, 0x10120, &(0x7f0000001300)={0x0, 0x989680}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = gettid() r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) mkdirat(r6, &(0x7f0000001340)='./file0\x00', 0x19) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x16) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) move_pages(r5, 0x3, &(0x7f0000000040)=[&(0x7f0000fed000/0x11000)=nil, &(0x7f0000feb000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000080)=[0x9, 0x8, 0x1], &(0x7f00000000c0)=[0x0], 0x4) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x57da86e7f94e765c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001400)) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000005b40), 0x400000000000122, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000001440), &(0x7f0000001480)=0x40) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001380)={[], 0x9, 0x4c71, 0x4, 0x3, 0x1}) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0xfd}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xfffffffffffffe25, 0x9, 0xffff, 0x3}, 0x35c) 13:41:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @rand_addr="63b6f1889336dbc80863b626ef091526", 0x7}, @in6={0xa, 0x4e24, 0x2, @empty, 0x2}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}], 0x54) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='\x00\x00\x00p#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:36 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000340)=0x6e) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in6=@empty}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000240)={[{0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc, 0xab1}, {0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='\x9a}?\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x80) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 13:41:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x3000) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000003c0)=r3) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r4, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 667.030122] net_ratelimit: 18 callbacks suppressed [ 667.030129] protocol 88fb is buggy, dev hsr_slave_0 [ 667.040356] protocol 88fb is buggy, dev hsr_slave_1 13:41:37 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xaa, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fremovexattr(r2, &(0x7f0000000180)=@known='security.apparmor\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f0000000040)='posix_acl_access)self&\x00', r3}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x3f, 0x3f, 0xa4, 0x4, 0x0, 0x9, 0x40, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x990, 0x80}, 0x20000, 0x639, 0x5d00db75, 0x7, 0x7fff, 0xff, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00007802df83682fb73b2abd7000fedbdf250300000008000800ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDADDIO(r8, 0x4b34, 0x6) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 667.215136] audit: type=1800 audit(1574516497.081:115): pid=17272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16785 res=0 13:41:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)=0x9eaf) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) fchmod(r0, 0x1876d9f2459a0f6b) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = creat(0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000180)={0x8, {{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x51b17800}}, {{0xa, 0x4e20, 0x80000000, @mcast2, 0x10000}}}, 0x108) [ 667.291671] binder: 17274:17276 ioctl c0306201 20000000 returned -14 [ 667.306536] binder: 17274:17276 ioctl c0306201 20000000 returned -14 13:41:37 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) 13:41:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa0000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 667.330507] audit: type=1400 audit(1574516497.191:116): avc: denied { setattr } for pid=17278 comm="syz-executor.5" name="NETLINK" dev="sockfs" ino=64315 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 13:41:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = getpid() ptrace$setregs(0xc2f520b147290ec2, r2, 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:37 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x45400, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12}, 0x156, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x200, 0x170bd27, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x44800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x30000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r8, 0x800}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000680)={r9, 0x3, 0x2, [0x7, 0x9]}, &(0x7f00000006c0)=0xc) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x8020001) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r11, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r12}}, 0x120) write$RDMA_USER_CM_CMD_REJECT(r10, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {r12, 0x80, 'A@<', "da85cb7f2a22838388b6e5d2f1c700a4e49c7cf6a55dd97e0483a094b40a6723aa09a14c98308eb848d95fb0c1a65611344a950b202ee37008f6ec95ead8570cbad16ec7322d523b123a919f8fe63505437b1a8cd3cf4f7b05e90d545448adeabd9a5ae3c8a3a6b4f664c896325bd0840791ef8294ae4690adfe5b68011d2643b4d54a2d3907c831387ee4880b8c89accefba62e8422a212ffcd55d82b1cdb1c09324e79e59aca69955b3cf415853cab02380f2b98007bb7d5aea3f9f4606db8e44e01605528cba92284a50f5a581464a00a49c2dff513a1b281c297a37d795e03c8d82a6c2add28bc4ab4b8547370c7fff9ba70ad460cd09cbe641f584af33c"}}, 0x110) write(0xffffffffffffffff, &(0x7f0000000300)="c6f600f3e25b3e613429cdbbdb2871ff2bde8868aac0483e3581bd171cdcec003fbc25645ef775f8b760370963b1b674943dde4ae4c6cb3311a5937facebe35bf3f3097115d66964a9ec134f58312af0691a926b405da30531bef197dced52687fd0bec6e52014324cd3a2340e0c7b4caa026e39b9cdf078eedeb1ba03e4e07ce3d05e955ba9620a74824487a073e03d31bc6768163e9b1efc2742f9edc7f70ce593253a018b7f2ed786901f175c1e4c37038ab9af", 0xb5) creat(0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000400)={{0x0, 0x0, @reserved="3d546dc3a2d35cda0d0f303242d1bc45886c427d536edf788dab30e8da90e74f"}}) 13:41:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x5, 0x80, 0x7f59d34dd2e0d205, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_config_ext={0x8cf, 0x800}, 0x10200, 0x513, 0x8b, 0x6, 0xffff, 0x80000001}, 0x0, 0xe, r1, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) write$P9_RLERROR(r3, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '\xdf'}}, 0xa) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) [ 668.070352] protocol 88fb is buggy, dev hsr_slave_0 [ 668.075539] protocol 88fb is buggy, dev hsr_slave_1 [ 668.310143] protocol 88fb is buggy, dev hsr_slave_0 [ 668.315313] protocol 88fb is buggy, dev hsr_slave_1 [ 668.720155] protocol 88fb is buggy, dev hsr_slave_0 [ 668.725539] protocol 88fb is buggy, dev hsr_slave_1 [ 668.730834] protocol 88fb is buggy, dev hsr_slave_0 [ 668.736013] protocol 88fb is buggy, dev hsr_slave_1 13:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 13:41:39 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) 13:41:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000540)="18a774b7b1f5b674a1a7bff3432fc42b2021018076791235de2473c1a999d6bc62f6b85e6ff917470cf37a2ffbb70b36fa7682c5d1717e731c2ba343196ff05fb89101009e61a286a9eb96b96b38be4bff0551278fb665e873b7948027a15d85f22084272f4c61c2dc72565d6e050dd00e495c389772fb98d5acdd4b2fd91b0e66b90b36174f17919830afd8d8cfe1890106c9f69a32087f82e37a234b76210ff79327430547e110002699bba21b62eef6fd25b1898a8445e1722353dba403e209432f61256c8632bb3fdfbf4db294384868b6be392d644aa85ec86ec9350b4ffd706bfb6c25e50280eb027589d8a59a9a01c7e36eceb1150909ba2cb3848a0382184f9e4bb1937047b36ba518ab1dbb00f40d5c271cd586e31863623583b398aba886b2afd7fe6b476b8570dd4aa3b1025ffd8935d25e023bb2acbe26569b7d17c5eec6f16e9e1ffc39e14a7d03483dc96f27245e96e0cddbaf30b495f6e604080d8a26e956f4625c806aa49da495913c34a0fe6b34c4025684259421a335dc6ae2b438790361b0112539995046ac2e3a05929022a54a73b937e8f8d2c905eeac69a329585874874493cea5f403bd7ee3f361d3953e5616f73926d8f82f37b7d71f9eacd3e7994c875c2ca8a67039730a24f241ab4cbd82f073d290d67c65f5973a676748ecd22a551350c1929fd4743125dbd7e1d8c46a2bed3638becc62cde206cbb0658883a1d839c1a97182e175ba05ecc1f2163baec91e9ee8ac7708cec7ff21053c80efbf5f566ff521e57987636e7063b3", 0x56e) 13:41:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr="87f9887d26745182ffb55245caa0a7a0", 0x5}}, 0x3, 0x8136}, 0x90) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7f, 0x40882) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000003c0)=""/248) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x5, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0x17, r3, 0xd, &(0x7f0000000040)="9941851ecb8d2bd0a5c72f7bcd8935aea30d5e1c243105a43da20760aa7baf2135cee6e0ecd29ea1682a2e5e7303982e8fbefc4b9eb7aa968f9dc9c3f19d81a0228e0d3358a24bb5799f5c8ee3fbb8466dd07efb7ff314c60a1d9162aeac3cebce7e2cb34c32de1855dcd403fc4ee4899c1f5642881fb37f14c83de4f05952592dcedd38f3ab3f011c8ddbda6553761eeebcc0ae1fdce55f329be14f2b39670f5136c76e68707b4de0a453b9ab552b14c5cc3d89ca7d97f3cc5c57502b") fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x612523d7a90441b6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)) 13:41:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x20, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:39 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1ff}}) 13:41:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="dfff8d1ce21673967466509f673f5943783d91171663a4429f495003d06a9746011ec4a2c3d0239f1a6bc44a2b0039225a51c7addc06364a3e13985daa60e6379a10f89504bf6af7a4296214aae56e4d6895e25b534e7282edaa36b433eae17148c07d5bf64b64f0aeb991e0e9dd27d08cfdfea292b831dad2172b8ed5c2aca98c8b6ca32b8a8582367defcdc475b783f65a5f4b8375f3a935027c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0xfffb, 0x2}, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000240)) fcntl$setown(r5, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x4, 0x4) creat(0x0, 0x0) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334000000faff00", "2f18cb8810f97c97644ab8a7d3aad580ac707c950000000500002a1400"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x80000000) 13:41:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x7, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0xffffffffffffffff}, 0x28, 0x1) getsockopt$inet_buf(r1, 0x0, 0x76, &(0x7f0000000640)=""/150, &(0x7f0000004000)=0x96) r2 = accept(0xffffffffffffffff, &(0x7f0000000580)=@tipc, &(0x7f0000000240)=0x80) connect(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x81, @rand_addr="36c09922a216651f7afa37d18d91c824", 0x80000001}}}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000001c0)={0x3, 0x7, 0x5}) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r9, &(0x7f0000000380)=""/233, 0xffbe) 13:41:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb1c7bd2ca60fbfd0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x480100, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1c5c, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x7}, &(0x7f0000000100)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r6) r7 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x65735a65173dc5ae}, 0x44000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000003c0)="96b5beef918de2da861fcc407bada72aaaafb25991f064736fb887f1ff0d40c0b59e9cbaab9d8cd9250e8f8daabe085f812478a7b3d1f6fd8b2f93e41962713edebde2dc84e3ef2eee8ef6e0e6eb22bdaed8775ab395afed9a5b427c6865b0230ce75c57659ba9d8c16bac3e40b6d45fa8cd41fe3631a1e6f4f689ef95a27f0be3a2e259e04d216c7f554f37361381d583cb889bc0f575cf9761ddd5c88833df69ee57a689e415bfc80b1c92e3b7e37aebcfad15b1f6d0a4d2bc4e1626") open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:40 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000002c0)={0x3, 0x2}) r2 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2880, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000280)=0x8000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000004c0)=0x2, 0x4) fallocate(r3, 0x0, 0x0, 0x8020001) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000000)="cd7d9965c7e190a34c45b76b520316517ff2aab0041fc57a6c8091b6e21056792abd79f29b", &(0x7f00000003c0)="e61726bcb5a8c3379533a6f870f4573a84fa5c80b378b7e024e1a6b8e156f70e82bc2a0b9996f77e2968680e90a446b25c7fe2e7a7910c5684eecc33680ba2ab027c20a154b94d532c5856113f5ec341e6090e3ccb3f62ad4c1a20c85b6b119d2352c10c5b4921942995f54fae3c6bb5601f74a4ef53087c4614ebf2cb83b8a02d2e8a1fda816c43c2def7e7cc8638405a0a646d1dfd0fd71be8f8fff8506e", 0x1}, 0x20) 13:41:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) waitid(0x0, r2, &(0x7f0000000000), 0x1, &(0x7f0000000080)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="2f80786e9c89a030152f5f3cd0f367348a0930abc8b4711147a6ff8f64a9b530300ce38f1f6aa030234663a7a1a68b42dc0c145f0cf7dafed469050e0bdc931c3d2685c1857a93d2e155244368f654f6c2fcd3dd1ec65dea5e9c4d9356e823ba8e592c385806d741f380fba0f2a5a98a833d047c8605a0648bc3fd875abebc008ad232c36d7bd31cfde20622307788d4a750fbc43aadfdbbfefb36ba53095f3a4acbe2a62df79ded1dfff86981cdb4abafc4d31517ebc451b8", 0xb9, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000580)={r1, 0x34, 0xd8}, &(0x7f00000005c0)={'enc=', 'raw', ' hash=', {'sha224-avx\x00'}}, &(0x7f0000000640)="fe7c64d5c25a0e75e79007a61ff18a884ce6c6c785160bd9bec1001995d7daadb3bb5db2ca0ffec2577ba453ec51099c850a8cfd", &(0x7f0000000680)=""/216) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000008c0)) r2 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x10000, 0x3, 0x4}) r5 = signalfd4(r0, &(0x7f0000000780)={0x5b}, 0x8, 0x800) write(r5, &(0x7f00000007c0)=':A', 0x2) write$apparmor_exec(r3, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x286a5a7bc98d4674, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) creat(&(0x7f00000003c0)='./bus\x00', 0x114) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000400)='bdev\\cpuset\x00', 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 13:41:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev\xdcloop#\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESOCT], 0x3) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) fsetxattr(r3, &(0x7f00000003c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x86, 0x1) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r4, &(0x7f0000000500)={0xb, 0x77, 0x2, 0x8a8}, 0xb) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r3, 0x21, 0x2, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x542a02) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x8, 0x7, 0x4, 0x40000, {r3, r4/1000+10000}, {0x1, 0x2, 0x7, 0x3, 0x7f, 0xc4, "6ab8b537"}, 0x80000001, 0x2, @offset=0x4, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r5, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffb99, 0x1, 0x0, 0x3, 0x7, 0x1, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e5000000000000000087b1ac7800108a6ce8904655361fe06f308fe6033a61edb7628d51c055faf7f4fdb10000000000000200", "2f18cb8810f97c97644ab8a700", [0xfffffffffffffffc, 0x6]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 671.170329] audit: type=1400 audit(1574516501.031:117): avc: denied { setattr } for pid=17430 comm="syz-executor.1" name="fscreate" dev="proc" ino=65655 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 13:41:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="e0000002ac1414bb0000000005000000f965000200000017efed22d78900e000000100010000000000aafaebbfc459597a2ef4b1212a8a9d81c7f4c3c7c09037fbb8b58489107d78dd35c9068fedfb6d5782963d1666756fe1fa6a0ed71f25eab1c69a8378ab6b997b768a873252c4a5e27cfa4891decd4afaebeac099b434e8d548bad10b81d7a2aa37f41cac93341da2029657fcf3e09897341f81808d8511f1901a575498c2d40ec0705bdd46a9f23eae0e09000000d14a4b16f039c045f2b637ac7d0978f543654fb3e7225aff8e7a2567d328e271fec691d9aebc43518810aa7dc996e85cbddda9688db5c674dedf2a367c20f81a05082fe08e84212aa8ceeced75c2db15a47aae4ca5ff9c74135bfa859aa0d35e3f64498a98424fbc6333ff9efca0cd4d02d3ea23fd11046ec173b4a108e99d2e728ed008925df55d0f1b99d9f9235246600ee29dc89147c28fcdf817a8a22529e7ca681baaec72cd40d9daf6a4f800aa6512c2aa77eff663a2cc7d556274753f8830960abb56e93428f5ac97a2ab30cf1f1d96918cda8520f153ee102393208893b0a90d4f7c778035dba9b6618127ab723a5c2c00270bcbe73a9e9955bd0cffde4d79ea04b087298a36cc3a301dec21c6a0bf583cb351f6dc613e1db9c4bc0be8321d90a292dd95cd09a04e85e406bc45c4f4e9ab193022cebc064468f89b124d11699b49c0ab4eac844fcb51b07737676334c26c77b9903f6de85e9253fa4177e00ad1df2be251205433142638f5531a8ee6c60f247790"], 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0xffffffffffffffff}, 0x28, 0x1) getsockopt$inet_buf(r1, 0x0, 0x76, &(0x7f0000000640)=""/150, &(0x7f0000004000)=0x96) r2 = accept(0xffffffffffffffff, &(0x7f0000000580)=@tipc, &(0x7f0000000240)=0x80) connect(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x81, @rand_addr="36c09922a216651f7afa37d18d91c824", 0x80000001}}}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000001c0)={0x3, 0x7, 0x5}) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r9, &(0x7f0000000380)=""/233, 0xffbe) 13:41:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='\xf0\xf7\xe3\xe8\x15') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) r2 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0xe, 0x84) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r5, &(0x7f0000000040)=0x100060, 0xa808) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x81, 0x6, 0x3f, 0x4b818ab7}, {0x7ff, 0x40, 0x1, 0x6}, {0x5, 0x40, 0x20}, {0x2, 0x9, 0xf9}, {0x3, 0x54, 0x6, 0xbb}, {0x2, 0x7, 0x20, 0x80}, {0x6, 0x13, 0x5, 0xff}, {0xff, 0x3, 0x7, 0x37}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r6) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000480)={@null=' \x00', 0x7, 'hwsim0\x00'}) 13:41:41 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x0, 0x240) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffff07, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000380)=@newchain={0xf08, 0x64, 0x4e84d6b7605e2a10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {0xa, 0x5}, {0xffe0}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x188, 0x2, [@TCA_TCINDEX_ACT={0x68, 0x7, @m_tunnel_key={0x64, 0x16, {{0x10, 0x1, 'tunnel_key\x00'}, {0x28, 0x2, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x67, 0x2, 0x1, 0x2}, 0x2}}]}, {0x24, 0x6, "a6b7211b007d6cc3eebacc9eb7fe66d467b07e577f6ee2782c7f92ccc5"}}}}, @TCA_TCINDEX_ACT={0x114, 0x7, @m_connmark={0x110, 0x2, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x938, 0x10000000, 0x9, 0x3ff}, 0x3}}}, {0xd8, 0x6, "f1d62afb038cb9283e6f1162994e39abb5e6de85193cee57a8865256e9541b5a7e1502201527f352020e43ae2d02ba26c9dc24e682fcd45d6062108a0ae18a5a855a7a3538fe73d4aa5ffce5bdcd2cf45b156afe0c2ca9289409a147abf1874e6dd0931934a7ef63305c382aa936204dc9cf1f7cae0c3016c53c6615c3ac47e0b1745a62ce99164c6129977e830c233fa2361280551bd2858c2f38bfa0063ed95d7bc48dfbc255ec4cd5796fe555d3a398d4f8102d99e6acd8c7a9efc1e82a2d37b3464201955ffac9a92fbdc6e7373d5d8df95c"}}}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x8000}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x8, 0x5, {0x3}}, @TCA_RATE={0x8, 0x5, {0x3, 0xc0}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x3ac, 0x2, [@TCA_BASIC_ACT={0x134, 0x3, @m_nat={0x130, 0x4, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0xa94, 0x8, 0xc6e9d12c26021bb4, 0x0, 0x6}, @loopback, @broadcast, 0xffffff00, 0x1}}}, {0xf4, 0x6, "d01675c82dac7e65372e6ad92e129d558c6fbf64cf745815406b30ef928bfc7406d61ca34729c711b19a74be9f0336458f62e11b596c9f01eedc63de1078aed6a9113e73e7e6a6fbce40de0e93d5d7556b1f188cac238d21b1f741526b97c94387eba14c763ce0f3ed7067f13c8a068fc5668cf5e9cb52c178d33231930ef157c28e64be0e176fe87b62f7141bac2b23eabb34dbb9a9a2e14daee06da89f5f1f1ee2908b3014afd0aab060c3207827d7295c01e6d732665ac5d2525b443fba2935390b84eee516675701fbed570c01e634fb0ee650b107176f81a554118c2a839bc326ee1275bd665e76f45d533e10e2"}}}}, @TCA_BASIC_ACT={0x17c, 0x3, @m_gact={0x178, 0x19, {{0xc, 0x1, 'gact\x00'}, {0xa0, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x8, 0x3, 0x3ff, 0xfffffff8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1889, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa42, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x7, 0xff, 0xf6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2655, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0xd68}}, @TCA_GACT_PARMS={0x18, 0x2, {0x140000, 0xda2, 0x9, 0x8, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x778, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x0, 0xfffffffffffffff8, 0x1f1d, 0xfffffffa}}]}, {0xc4, 0x6, "175af7d858abd38cc4d36c84312320b7bba47b2d45ae32bbe0376cd1cfd690fd4ead4935b2e7fb6730da34a8f03c4587bf0c9ace21306d3881d36299fcfa9dc7029c191747e5cc939ef701e39ce3f46d74f051d4782d9f4724a8d557a440e67b97c139c6d87ecce9bd2d36dcba788735afea456c54397ed60a164be56199323df45b618393aa291774c6852d97ccc2eb452374825b811428d43a19d59829a79fbee7e95f25793d5f839684667d0d6a2129f45b75d1496bf94d3a4b1ccadd"}}}}, @TCA_BASIC_EMATCHES={0xf8, 0x2, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x3, {0xe88, 0x8, 0x7, 0x0, {0x0, 0x1b, 0x3}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, @TCF_EM_CONTAINER={0xb4, 0x3de, {0x5, 0x0, 0x4, 0x0, "3aaa17c6d589b69c0f3facdae744c1f04bb14fefcc49a99b6461f9a7a5b9c65473ebe4f24f15bc5334668c4f2c8e09ceaae3b861c9d2b6adc264a8731b880e2c3b2259106db4742b2b9d26649cca0f88793968085da7e24a4ece190b9bbc9cf759bd2192c5098bf56a2bda4ec8c9d680de57069ff21ea554ee30a44ba5457e294346d39b0a01ebad68c9c86c1d10df58df46f6f4a90db48eab538fe990d2e5dfbef071"}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, @TCF_EM_META={0x10, 0x7, {0x1, 0x4, 0x6}}}]}]}}, @TCA_RATE={0x8, 0x5, {0x3, 0x72}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x958, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffeff, 0x9, 0xfff, 0x3f, 0xf0000000, 0x0, 0x1, 0x4, 0x0, 0x5, 0xffffffff, 0x8, 0x100, 0x6ff, 0x5b, 0x0, 0x8, 0x8, 0x8, 0x7, 0x0, 0xfffffff9, 0xbeb5, 0x1, 0x401, 0x40, 0xffffffff, 0x5, 0x80, 0x3, 0xfff, 0x7ff, 0x81, 0x7ff, 0x7, 0x12, 0x2fc4, 0x20, 0x8, 0xbd1, 0x4, 0x0, 0xee, 0x7b, 0xffffffe0, 0x8000, 0x1f, 0xfffffff7, 0x0, 0x2, 0x5, 0x1, 0xa4a, 0x7, 0x8, 0xe36, 0x0, 0x10000, 0x2, 0x5, 0x4, 0x1, 0x511, 0x4, 0x4eb, 0x80000001, 0x6, 0x80000001, 0x81, 0xfffffe9e, 0x3f, 0x2, 0x9, 0x3, 0x0, 0x0, 0x8, 0x7fffffff, 0xfff, 0x8, 0x9, 0x0, 0xfffffffe, 0x6ff, 0x1f, 0x66b4e534, 0x5, 0xe81, 0xfff00000, 0x9, 0x100, 0x2, 0x5, 0xffffe136, 0x7, 0x2, 0x3, 0x0, 0x0, 0x7, 0x400, 0xf7, 0xffffffa7, 0x1000, 0x9, 0x724, 0x1ff, 0x7, 0xa1f, 0x400, 0x28000000, 0x7f, 0x1f, 0xa5dffc9, 0x4, 0x7, 0x10000, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x1, 0x1, 0x91, 0x2, 0xbe25, 0x896d, 0x52, 0x8, 0x6, 0x4, 0xfff, 0x5, 0x8, 0x10000, 0x1000, 0x3, 0x5, 0x0, 0x4, 0x8, 0x1, 0x1ff, 0x20, 0xca, 0x100, 0x7, 0x3f, 0x6560, 0x0, 0xff, 0xfd4, 0x80000001, 0x8, 0x9, 0x9, 0x8, 0x7fff, 0x0, 0x4, 0xffffffff, 0x4, 0x4f, 0x7ff, 0x8dc, 0x7f, 0x9, 0x6, 0x400, 0x7, 0x1, 0x2, 0x8000, 0x1, 0x7ff, 0x0, 0xf48, 0x3f0, 0x8, 0xb85, 0x5, 0x7, 0x200, 0x29f, 0xfffffa9d, 0x4, 0x0, 0x7, 0xfffff357, 0x4, 0x5, 0x3, 0x766, 0x3, 0x80000000, 0x72, 0x8001, 0x8, 0x9, 0x668a, 0x9, 0x3, 0x1000000, 0x565deae5, 0x4, 0x6, 0x1000, 0x7, 0x1f, 0x6, 0x3, 0x6, 0x2, 0x3, 0x0, 0x2c16e3e3, 0xa8c5, 0x0, 0x5, 0x24c8, 0x9183, 0xfffffffd, 0x8f, 0x4, 0x9, 0x7f, 0x20, 0x11, 0x1, 0xff, 0x200, 0x9, 0x4, 0x9, 0x82c, 0x1, 0x6, 0x2, 0x0, 0x5, 0x3ff, 0x1, 0x1, 0x7f, 0x86, 0xffffffff, 0xe41a, 0x0, 0xfffffffa, 0x1000000, 0x3aa1, 0x28, 0xfffffff9, 0x4, 0x89, 0x4]}}, @TCA_TCINDEX_ACT={0x10c, 0x7, @m_vlan={0x108, 0x5, {{0xc, 0x1, 'vlan\x00'}, {0x28, 0x2, [@TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x2ab}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x3, 0x6, 0x8000, 0x6}, 0x1}}]}, {0xcc, 0x6, "01ded17d564613916fcbdb6c5350cc7702cf2354d3e30d92a8023d1db2ad75b8963a465fc9e588427987d5ce95265bf37dba071702253e601c5c124b4223be5016acf3c984e2df21a43e0ac9915521e425d6712d36464f2b46572c0a1f560857eef26969f25f27dcbf8983622439fbaafc06af7a9d49899caba5fd28c79adac0af5e8c43984938cd97ae1d0286672982c56a6e3891eef7254d36638caae7f56869d7e4f7a73f1f9e0e7c21c18467cfd4c5e8118714675aabe0559faf34c2bbf610f405c76ec4ea"}}}}, @TCA_TCINDEX_POLICE={0x10, 0x6, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_POLICE={0x408, 0x6, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x5, 0x7fffffff, 0x2, 0x10000, 0x9, 0x2, 0x7fffffff, 0x1f, 0xffffffff, 0x9, 0x5, 0x9b, 0x4, 0x80000000, 0x1, 0x3, 0x31, 0x200, 0x40, 0x9, 0x467c4f07, 0x7, 0x3, 0x80000001, 0x7fffffff, 0x1000, 0x7f, 0x3, 0xbd9, 0x401, 0xabb2, 0x9, 0x9, 0xa377, 0x80000, 0x7a1, 0x9, 0x3fffc, 0x57845aeb, 0x1, 0x0, 0xff, 0x9, 0xe9db, 0x8, 0x9, 0x2, 0x0, 0x5, 0x7fff, 0x6, 0x8, 0x8, 0x2, 0x7, 0x4, 0x1, 0x6, 0x4, 0xf650, 0x3ff, 0xfd3e, 0x6, 0x81, 0x0, 0x800, 0x71a, 0x8, 0xbae3, 0x6, 0x2, 0x5, 0x2, 0x1, 0x3, 0x4, 0xffffffe1, 0x1, 0x0, 0x100, 0x9, 0x5, 0x9, 0x80000001, 0x6, 0x20, 0x9, 0x7fffffff, 0xfdca, 0x60158000, 0xfd800000, 0x7, 0x9, 0x15, 0x0, 0x1, 0x10000, 0x2, 0x3c14, 0x10000, 0x1ff, 0x400, 0x67dc, 0x7fff, 0x0, 0x8, 0xfffffffc, 0x9, 0x2, 0x80, 0x5, 0xd72, 0x7, 0x5, 0xfff, 0x400, 0x9, 0x0, 0xfff, 0x1, 0xffffff01, 0x1, 0x7, 0x40, 0x3f, 0x0, 0x6, 0x7, 0x401, 0x7, 0x7ff, 0xcff, 0x9, 0x9, 0x1, 0xd124, 0x0, 0x4, 0x4, 0x2, 0x64e3, 0x0, 0x4fd3, 0x1ff, 0xcb, 0x6, 0x8, 0x5, 0x74, 0x8be, 0x7, 0x1, 0x0, 0x4, 0x20, 0x0, 0x101, 0xfffffffa, 0x4, 0x6, 0x7, 0x7bf, 0x4, 0x834, 0x0, 0x8, 0x40, 0xffff, 0x5282, 0x7, 0x4, 0x8, 0x5a38, 0x150a, 0x7ff, 0x2, 0x3f, 0x5, 0x3, 0xfff, 0x7fff, 0x7fc0000, 0x34b4, 0x5215, 0x24, 0x6, 0x8, 0x8, 0x80000000, 0x80000000, 0x81, 0x3, 0x3, 0x0, 0x5, 0xa00, 0xe12, 0xfffffff8, 0xb73, 0x4, 0x0, 0x2, 0x5, 0x0, 0x8, 0x1, 0x4, 0xbf, 0x1ff, 0x475, 0xfffffffe, 0xed2, 0x7fff, 0x1, 0x4, 0x1, 0x1f, 0x9, 0xfffffff9, 0x7, 0x8000, 0x7ff, 0xffffffff, 0x1, 0x4, 0x7ff, 0x9e5, 0x8, 0xfffffc00, 0x8, 0x101, 0x80000001, 0x3, 0x5, 0x401, 0x7, 0xffffffff, 0x3, 0x6d, 0x9, 0x81, 0x7401, 0x401, 0x2, 0x7, 0x9d95, 0x4a, 0x0, 0x6, 0x7f, 0x2, 0x2, 0x800, 0x9, 0x5]}}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0xf08}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000000040)=0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x240000, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) getsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r10 = syz_open_dev$vcsn(&(0x7f0000000080)='\x00\x00\x00\x00\x00Q\xc7\xe7\x10\x00', 0xffffffffffffffcf, 0x20000) setsockopt$EBT_SO_SET_COUNTERS(r10, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r11 = fcntl$dupfd(r6, 0x0, r6) bind$bt_rfcomm(r11, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r11, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:41 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:41:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x801, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000400)=0x6, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) [ 672.240168] net_ratelimit: 12 callbacks suppressed [ 672.240174] protocol 88fb is buggy, dev hsr_slave_0 [ 672.250304] protocol 88fb is buggy, dev hsr_slave_1 [ 672.470203] protocol 88fb is buggy, dev hsr_slave_0 [ 672.475392] protocol 88fb is buggy, dev hsr_slave_1 [ 672.870200] protocol 88fb is buggy, dev hsr_slave_0 [ 672.875346] protocol 88fb is buggy, dev hsr_slave_1 [ 672.880755] protocol 88fb is buggy, dev hsr_slave_0 [ 672.885823] protocol 88fb is buggy, dev hsr_slave_1 [ 673.270235] protocol 88fb is buggy, dev hsr_slave_0 [ 673.275364] protocol 88fb is buggy, dev hsr_slave_1 13:41:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x3, 0xc0e1, 0xffff, 0x1, 0x100, 0x8000, 0x3, 0x3f]}, &(0x7f0000000080)=0x14) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:43 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13:41:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0xffffffffffffffff}, 0x28, 0x1) getsockopt$inet_buf(r1, 0x0, 0x76, &(0x7f0000000640)=""/150, &(0x7f0000004000)=0x96) r2 = accept(0xffffffffffffffff, &(0x7f0000000580)=@tipc, &(0x7f0000000240)=0x80) connect(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x81, @rand_addr="36c09922a216651f7afa37d18d91c824", 0x80000001}}}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000001c0)={0x3, 0x7, 0x5}) ioctl$TUNSETOWNER(r6, 0x400454cc, r7) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r9, &(0x7f0000000380)=""/233, 0xffbe) 13:41:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) accept4$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x31d}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r5, 0x2}}, 0x18) fallocate(r4, 0x0, 0x0, 0x8020001) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000240)={0x8, "220752fefcf2d0bf13b2ad70fc72b8db99f170ba8ca44090a0351d8f2f1bcb13", 0x1, 0x3, 0x2, 0x20000, 0x10850, 0x8}) 13:41:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x40) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x333103, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x520, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'rose0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r5, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/214, 0xd6}], 0x6, &(0x7f0000000580)=""/249, 0xf9}, 0x102) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x4, 0x7ff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x8, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) socket$netlink(0x10, 0x3, 0x0) 13:41:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x800, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x1d8) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000003c0)={'irlan0\x00', 0x3ff, 0x3}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "70e3e0f57c8ce6270b240716e96042aae51d871554c11cd59cc8fb43081025bad6b30077f70a7c0f306157a96a00", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c979536b8a700", [0x0, 0x3]}) ioprio_get$uid(0x3, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb56) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_int(r2, &(0x7f00000004c0)='io.bfq.weight\x00', 0x2, 0x0) fchmod(r6, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) 13:41:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/125, 0x84}, {&(0x7f0000000000)=""/49, 0x37}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x7, &(0x7f00000004c0)=""/104, 0x68}}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/77, 0x287}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000e40)=""/36, 0x1}, {&(0x7f0000000780)=""/229, 0xffffffffffffff5b}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x7, &(0x7f0000000900)=""/74, 0x4a}, 0x8}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/252, 0xfc}], 0x1, &(0x7f0000002680)=""/4096, 0x1000}, 0x3f}, {{&(0x7f0000000b40)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/115, 0x73}, {&(0x7f0000000c40)=""/158, 0x9e}], 0x2}, 0x203}], 0x4, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000001300)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000012c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e80)={0x3d8, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0xffffffffffffff88, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x240}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_LINK={0x184, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c71}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76785437}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x577d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff6fad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xfffffffffffffe43) write$P9_RXATTRWALK(r8, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0)=r9, 0x4) [ 674.636813] binder: 17534:17536 ioctl c0306201 20000000 returned -14 [ 674.654636] binder: 17534:17536 ioctl c0306201 20000000 returned -14 13:41:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x5}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000000}, 0x2000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 674.695090] binder: 17535:17540 ioctl c0306201 20000000 returned -14 [ 674.709246] binder: 17535:17540 ioctl c0306201 20000000 returned -14 13:41:44 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x10001, 0x4) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000003c0)="90c0f183ecd43aae9fe0a8b20892889537d9a9390cc3042c75cb9d119ae17a5c7b7f8d98fd76f78e9212bffe96f776455cc302ae4a0654e22639d56d6a40cc0254f579cde317c3e3c5b7ec910bdefd3f6c1ddd66adf9ef40e50369267dbf4548981628b9152c6090f9066670123a05fa42d1a0ffe67dc01b6e97020b2af8ec5f23cba16757df8cccb1304a39f3853b47a59adaef0cbde707975c125045d8d128b6ab5623af794e50f35b556f50e3c8fb78f63acf564a0311ed544a", 0xbb) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e50c02fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334002300001700", "2f18cb8810f97c97644ab8a700"}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000480)={0x1, 0x7}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xfffc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 674.853975] audit: type=1804 audit(1574516504.721:118): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/81/bus" dev="sda1" ino=17473 res=1 13:41:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x4352}], 0x24}, 0x2000) [ 675.001009] audit: type=1800 audit(1574516504.781:119): pid=17557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17297 res=0 13:41:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x04\x00\x00\x00#\x00', 0x200000000, 0x400) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_exec(r2, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYPTR64, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRESDEC=r3], @ANYRESDEC, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES64=r3, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRES16=r4, @ANYPTR, @ANYBLOB="3f27db2193cdef77bc171b86c71abcc23cf607dc023d7081ac83af3a5d309b54a9791eff480158b5914d0af4a40175b652dabc518bd79c9b1288d4bccc43c2c4a3fdffb95f20d2b30d390539a9dfe9e8a798e8990da9d5d208205eb5efff575bbecba526e2f5ad352ee348d117eb368b37e7d0f7c0465d2cac6d91717cfad8da74a537ce84359c6de3e9493b99c22f19173cea19bd6fd9be70bddc0e7e044a9a6eb749b09402862fd94fe2d6975398c3b421d5bf0de31325c3d93c541bf85220e5ef7ef40c289de2ac0e2fe7a694ae17ba2b4bca0de7aa23ed003c3e4cbebcb40e91", @ANYRESHEX, @ANYRESDEC], @ANYRES32=r5, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYBLOB="76dcfc2e4cb6d64df769817017640015", @ANYRES16], @ANYPTR64, @ANYRES32=r6], @ANYRES16], 0x6) open$dir(&(0x7f0000000500)='./bus\x00', 0x8040, 0x10) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) r8 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = dup2(r0, r8) ioctl$TUNSETSNDBUF(r9, 0x400454d4, &(0x7f00000004c0)=0x5) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1, 0x8001, 0x5, 0x3f, 0x10001}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000480)={r11, 0xfffffffd}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:45 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x1d0, 0x0, &(0x7f0000003700)={0x77359400}) [ 675.165346] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.192049] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.220589] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.240505] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.270101] audit: type=1804 audit(1574516505.131:120): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/432/bus" dev="sda1" ino=17110 res=1 [ 675.278771] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.394177] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.401009] binder: 17565:17575 ioctl c0306201 20000000 returned -14 [ 675.418277] binder: 17565:17566 ioctl c0306201 20000000 returned -14 [ 675.424891] binder: 17565:17575 ioctl c0306201 20000000 returned -14 [ 675.434242] audit: type=1804 audit(1574516505.201:121): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/432/bus" dev="sda1" ino=17110 res=1 [ 675.600263] audit: type=1804 audit(1574516505.341:122): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/432/bus" dev="sda1" ino=17110 res=1 [ 676.570317] audit: type=1804 audit(1574516506.431:123): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/81/bus" dev="sda1" ino=17473 res=1 [ 677.430185] net_ratelimit: 18 callbacks suppressed [ 677.430190] protocol 88fb is buggy, dev hsr_slave_0 [ 677.440301] protocol 88fb is buggy, dev hsr_slave_1 13:41:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc93}}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000600)="f4c7e3b77a503a3db7f99b10b11d57b2366646a9ca00009467ec15f9388e4abe676045096e389aaadfa9e4a4defdf3a62a01faa4e07e8a5c2b99557097f4f203e5405cdfe7b992aa9fa1d51401ecd2a73176041521308d", 0x57}, {&(0x7f00000006c0)="e1dd2bb1d0a037b5a5e7e48adadee0b41b6563950a8d3993603174d3210b4b71a4b538009ce5dbdb7ff35fc51bcd74a2711fa9a6278c3be02877a4e92d9055b1d55a45ac83cfb2b6927957218833eb09e7b4", 0x52}], 0x2, &(0x7f00000009c0)=ANY=[]}, 0x4000) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x11) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) socket$kcm(0x29, 0x5, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8ab, 0x5}, 0x24800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="56280b4a8f3d2855"], 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x4, 0x4, 0x7f, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x4, 0x3, 0x33c, 0xfff, 0x100000000, 0x2, 0x0, 0x0, 0x0, 0x8e9, 0x3, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x20000, 0x7, 0x0, 0x2, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) 13:41:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fd) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000080)="933b6d9e39b867300cc583faa0436fb99a97094d0da388a406ffa08430f1c85258e0cdd380ceeee0ce07") socket$unix(0x1, 0x1, 0x0) 13:41:47 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 13:41:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) connect(r2, &(0x7f0000000640)=@hci={0x1f, r3, 0x3}, 0x80) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x70e, 0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x1, 0x70, 0x8, 0xb0, 0x4d, 0x4, 0x0, 0x8, 0x50021, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xccd, 0x0, @perf_config_ext={0x400, 0x1}, 0x8000, 0x13, 0x8, 0x6, 0x80000000, 0x761e, 0x1}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:47 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000000c0)=0x401) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000840)) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000180)="3d7d38617737ccd8e47a7741a6efdd56e5899688b4afc0814a1d1204ee89d0fba7a1d64ec4154d16bd58b5e08fbbd11610063f52236137d1d038a0a9d4b21a3e4cf2b2611c9e9499b5c539985e9b4376e8d297e7e86ce14c1967139b2543a9ece82519c905f91ba38f2a9a898eb91148602f8349502df7e071c911224d35e610", 0x80}, {&(0x7f0000000300)="53c1c077323262d670eefce191a1dff09bebf41ace3175c71f2f52c818a16b7ccb228b0dd765fa7d267236c1e414683a512250b3990268cd6d4b8a6e89fa607dcc2fd79fe0ae0775e3b3d352d7d52819b663eb1c823cf45ce5b2d3cbc9fe2c6e74a5661d94dbfb620583ed1f268dcdcc0ce8d7a3e5faa04a5594d3ee2c90635f225017bf521a052c9da0a6be", 0x8c}, {&(0x7f0000000100)="49f533e4fe34799e12808c43d4fffd2788ed78e25554898d0f77864666", 0x1d}, {&(0x7f00000003c0)="a9a67b7490b9ad01e584af5eae1c9b8055c5eca3b5b28a7816127f4d1a56072a0b007925b7a715c1adc6313e8e42da046ca7772107dec79aea9db805310aee8839cf7918aeeb0fdccbf650fdbde099714f19984b08c838ee7109edcbffba8d215767d83dbf2676be1ab17c588495a8d981835afa1616790f70c6c6d13f62c523686cd2498ae7c86c2d7eefd0a509b36d125d14e0115647a15b90882cf1", 0x9d}, {&(0x7f0000000240)="098956eed3646babd00777b551b794df264264e62e5bf5f264d35d53ef7eda259de0ea", 0x23}, {&(0x7f0000000540)="5f3657ffa301ee350666b56d9bdd539832e295cc7f05e46e746c1ca82a20d6c15a13ff036e1aab444f2f13de400547c9adc8c76735fcc4f5bcbe60e97cfbe8c9c6b88378e1d34a32246786c4e933d6fe1b9acbb6b8c678faeed8fdd6994e25f2ba32be0ecb38ce58d43f8c823845fe9c228c0253b50e9573cb708d205737a352fcd99fd8268800d9acc5d6fee4c62e6b43c4bc5ab12113cde6d9c4737bd01dd801d89845bb070a4bac3f8274066cd675ebaf56794cc0cf6c673fc069ef3c462f7d8daa960a6f", 0xc6}, {&(0x7f0000000740)="dfec6e65eded1a1262f5bc370119063837b7628a0bc1831f58c4a8c66f3dd6aeda77cb49ce2106c7421bbf045947f296847a11377fb460d1bd119326266c91ea56f1bf6cf8b95ec1dc5cc93564e6029e40b8d7bd4f775601ff4fe156ed8edfcff2394c80ca0084c9cff6b3d6c0f2816c69e676ca5c8784be09ad7a3b01c5c3222a32054f9a8fc3", 0x87}, {&(0x7f0000000880)="076601fad8fff0746e9b8d18d09f66ef5f8aa7f3085e4dfa4eee59a040f7e6d05fb489d1cd761d34c0673779773b340d8e968a0e939a535e0502ac8b2cdf0b51261f8ca0d676556c51727580db6d29486cb95f3eae4e3c9eb0163083a75018eb1893d65e1176b740fb99bd13ec36997588b7da02a971d3e7378bf61b0dca672b629b3c7aacb0c1ae668614d9fcf6dd5945b9f4e1b378885150ae93d4f9719062b174c529caf805414f0809f497c4e1f3971889eeefcb1707d50c4d952e6f", 0xbe}, {&(0x7f0000000940)="65658832b453c3c309f7df81caee5b4c9adb6e9a70b09eccb8cfa5bff75c90d80d4799dd03d87b903b532e6c2f9ad76d682778866193ac4a5cf9b87d7623dd0bce2b80a0e9bf0a1de74860eff91c2761095437003fb55e104cef264bb235326f656f1667757af6256ec41bfa53f6e93e7a60ce20fc89fc75c5ae00273f039c438b5b80ca51fb3ddb01eb7551e5638432fa69bec53efd1a568548749c7538e00132315a2c864c1338ff3b223dda0f26b650622f3251033a7841975a367838ed2b974d4dcd1afef43e6e2f4917e76a4051eb9c15267286bf", 0xd7}], 0x9, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x268}, 0x10000000) perf_event_open(&(0x7f000001d000)={0x3, 0x3d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x62ac, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0xc) 13:41:47 executing program 1: r0 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x841) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x9, 0x1}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 13:41:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0xffffff7e) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0)=0x1, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000980)) getpgid(0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000500)={0x8, {{0xa, 0x4e21, 0x0, @mcast2}}}, 0x84) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000180)=0x84c5) unshare(0x4040000000) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400050200000000000000000a00007a", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000480)=0x8) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = add_key(&(0x7f00000004c0)='ceph\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000800)="888b9e05ff2c84a958ab36ed1e0e99e50f750e4b37f542e10eaf5c129ddd", 0x1e, 0xfffffffffffffffd) r9 = add_key(0x0, &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="a4a0017f01ef10aa77f7eff34a0d19e66a4ea3d09f396f1e017cdddba34c62bedf6684100c3f80ca579611a7871dee0fe31c21e84279e4c7df39e3b38a975f2a3161d2863e5f75f95e1312c7e7d3545c38d67803aaef89f2775d5c9ab02619da479013bc850aae2ed39553e386f0e9aa2592cdb026933a8bea20e12cf579105700c732dd299844f9ed46144d0bd674c1b32e0671f58db323096cada4", 0x9c, 0xfffffffffffffffc) keyctl$negate(0xd, r8, 0x1, r9) r10 = memfd_create(&(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iqv\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x00\x00\x00\x00\x00\x00\x00\xae\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.g\x10H\xa8\xc9\x1f\xfc\x1e\xdfF\x16K\a@\x8c7\x1d!\xfd\xb0\xefW\x8f\xb8\x19\x8dS\xcer\x00SE\xdcD\xd2\x98\fy\x8dQ?7m\x9a\xe3\xca\xb0~\xdb*\xa7\xbf\xeftV\xa1\x94\x911\xa7\x8cYiY\xd2\xecF\xec\xb4/\xca\x97~^o\xd74\x11\'\xe1\xce\x06\xe1\xebV\xfd\xaa\x19\xd3\x14\xad\xea=o\xf2\x15g\xa9\xca\xa7\xc6\xd6\xaa\x86\xcc\x03\xcfD\xfe\x0f\xd4\xa7\x9f\xd8\n\x13T\x83\xdb\x19}\xf1\xa9\xac\x9eV\xb9\x15\x852\xfd\xaea\xff\xcb\x86d:\n\x85\x807]\x96\xb4\x96\xbc\xa6\xe6\x86\x80Gy\xfe\x8c\x1aV\xce\xb2h\xfd\xee*\xf0\xb3\xc38o\xac\x96Y\xa6\x81~\x8e\x8b@k\x7f\x88\xdd<}\x91\x83\xb0[\xff\xe3\xb9\xc6P\xd7\xc9\x87 \xef\xc9M\xa7\xbc\x1c\xa4~\x9b\xee\x94\x02&\x980\x10\x96\x96\\\x00\x00\x00\x00\x00', 0x0) pwritev(r10, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r7, r10, &(0x7f0000000240), 0xffffffffffff7509) sendfile(r7, r10, 0x0, 0x20020102000007) ftruncate(r10, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) 13:41:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000040)={{0x1, 0x0, @reserved="9e3c5311083c530cb56a3e8bf208ae6bee8a31c2121f1f9aae72abd19276b9b8"}}) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}, 0x3f}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) ptrace$setopts(0x4206, r3, 0x9, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x4000) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, 0x0, 0x54c) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) getpeername$packet(r2, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003080)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000030c0)={'rose0\x00', r3}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0x4}}, 0x10) 13:41:47 executing program 3: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/fs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000003c0)={0x0, 0x3}) getxattr(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)=@random={'osx.', '/dev/loop#\x00'}, &(0x7f00000015c0)=""/233, 0xe9) fallocate(r1, 0x0, 0x0, 0x8020001) write$selinux_load(r1, &(0x7f0000000580)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) r3 = memfd_create(&(0x7f0000000540)='/dev/loop#\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x101, &(0x7f0000000080)=0x2) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r4, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) geteuid() ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x11, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae0000000008000000000000f2a900", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) write$apparmor_exec(r5, &(0x7f00000000c0)={'stack ', '/fs\x00'}, 0xa) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000100)={0x5, "b450e8d0519aa45ffb11710f331bd305df509ad5c06fe48ff23332d019fd3368", 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) write$binfmt_elf64(r4, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x9, 0x7, 0x4b, 0x9, 0x3, 0x3, 0xb7, 0x2d0, 0x40, 0xd9, 0x95c, 0x2b, 0x38, 0x2, 0x1000, 0x80, 0x2}, [{0x7, 0x3, 0x5, 0x0, 0x7, 0xffff, 0xda, 0xcccb}, {0x3, 0x9, 0x5, 0x9, 0x7, 0x6fe, 0x1f, 0x9}], "2f8a9ecd142fd438851780e6e3a9272f3d", [[], [], [], [], [], []]}, 0x6c1) 13:41:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) mq_timedreceive(r4, &(0x7f0000000040)=""/67, 0x43, 0x3d8, 0x0) [ 678.106026] 9pnet: Insufficient options for proto=fd 13:41:48 executing program 3: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400ee0a1fcec025e39cff8989f5d968a1c73fef3ce350be19c6c0aeec7838042bce54942db50f81590a63ebb113f58021", @ANYRES16=r4, @ANYBLOB="050e27bd7002ff"], 0x3}}, 0x8040) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x181001, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8020001) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) openat(r9, &(0x7f0000000100)='./file0\x00', 0x10000, 0xa) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x8020001) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x440803, 0x0) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x8020001) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf25010000003afd070008000100", @ANYRES32=r5, @ANYBLOB="0000000086cb64aaabbf9bdbcbdaa8c2885ffa1d797bbfcf28bd9fe74b0e43e9d0d7517f14b5d002c82b03f23242e25d4f4f66990be9b250d113bd458916176ecb9bb9865f77f4e3406b8207d48f12825f970c6355a403e934fec46a810091f6b127b8f3b033105f7682ada401f2b02438b64e636b519325424691b13f58f71c4303645c439c489a0b32a500c7f4e5bb9ed755d17e88f71749466279c99e5417998ce70eec6e6c25cde87c973252c6e5f2ef168381fedae322928ce939cd0eab35201e8e82fa2d5e9bed0de9bcf68b749d818d3afb7b9d60c445f8be1d15bcf0dfe84f71aabe9a", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="000004000010000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x80) tkill(0x0, 0x16) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 678.184884] 9pnet: Insufficient options for proto=fd 13:41:48 executing program 3: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 678.289014] 9pnet: Insufficient options for proto=fd [ 678.470135] protocol 88fb is buggy, dev hsr_slave_0 [ 678.475290] protocol 88fb is buggy, dev hsr_slave_1 13:41:48 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000540)={0x8}, 0x8, 0x80800) fcntl$lock(r2, 0x24, &(0x7f0000000580)={0x1, 0x0, 0x800, 0x40, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ustat(0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x47c, 0xc, 0x6e, 0x3, 0xe0, 0x0, 0x3, 0x3f, 0x6}) 13:41:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x5, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xed5, 0x20000) close(r2) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000100)={0x1}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:48 executing program 3: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:48 executing program 1: write$selinux_load(0xffffffffffffffff, &(0x7f00000003c0)={0xf97cff8c, 0x8, 'SE Linux', "b46b83de9d5b6bb1ba19b5accb667f9ae012bd80962de0bd49545778fbbddcb605c953c0cd10e9dcbdd96f3aad5bcc7c5e9ba3fd944ea8f490ddb7db75e394be4db2f64c60edda93935f6de62144af66ddbefead061f8a547fa658e805607c16fcb4e7d6ad7ce37b310fa050697a3ae5ba43cc17595fdc735cbdb9091e7ebebb70f22b08f2aadc1bd72416208cc80e79c370632bae42d304fc4a502ea819f47847786500de16a2423df4c8e7b0522aa85677"}, 0xc2) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 13:41:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="1e8f27a27154148bc2c2f922879ca2e365d3bf35be28356ee770b373201c6d8dd970aeb8be41b14db00895c30908599ce85bf04f0ba0098427714afebb5d3f074b252e9e6786259623a578c1df10a8cd30df3a74c9f391c181b6d122d3d0376aa67be645f3c94a2f8a099ed57f8b045466eae087741749392ca4cbcc9299a5b00493585dd0c20befa641d87557c44370a7d297406d9e2345fd9e4f22f938f9adb6776a65659f2fc139cfbf0c87d516c15850b6431d83d448899e05f40b7aa23cac8f83163a963b3e166ac1f67ffbe7efb54b1bff5f55d293cfb522abf9f953cd396de6a22ad9afbf0d994f970bee13d635526bf6da80468d63ed1a005851854d") r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setopts(0x6, r3, 0x8b9, 0x100030) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3e33}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x31496b9d}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) [ 678.635304] 9pnet: Insufficient options for proto=fd 13:41:48 executing program 3: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 678.710121] protocol 88fb is buggy, dev hsr_slave_0 [ 678.715252] protocol 88fb is buggy, dev hsr_slave_1 [ 678.743397] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 13:41:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="f2933ab72cda07badf389ef1dca53957e94ece614eed7dc675ed7db92d2c937d4e9baaaf113781dc2075b26e5348c9ea9d4f2a23a1b17a522b366a5ac08614bf259441a365567696821ac5d0c896a77fa447fddd387c65b17ceec6d035fd269208f8d68b2b0d366dd8eda1b0014d4629309e50f36df9062b43d1962a74f410289f6f7f43b9dbe40bcd685abeaf3e9c560c0fc076c0e20fe0dfcca76db606f896f81e0888b5101d59e718a137746eb8b6c6996773b36cb5aacda11c7c15b23730532f1ae66cfc974fffd164e11a5f4d802f", 0xd1) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x642442, 0x0) write$apparmor_exec(r6, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESOCT], 0x3) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000300)={r8, 0x100000001}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null, @bpq0='bpq0\x00', 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null, @bcast]}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) ioctl$CAPI_GET_ERRCODE(r9, 0x80024321, &(0x7f0000000440)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r10 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r10, 0x100000000) 13:41:48 executing program 3: pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 678.784376] 9pnet: Insufficient options for proto=fd [ 678.831682] binder: 17708:17710 ioctl c0306201 20000000 returned -14 13:41:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01004000000023000000140000000c000700080002000100ffff"], 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000008}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x15c, r5, 0x108, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffa87}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa10b}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x28}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf808}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f00000000c0)) getpid() creat(0x0, 0x0) [ 678.873813] binder: 17708:17710 ioctl c0306201 20000000 returned -14 [ 678.897473] 9pnet: Insufficient options for proto=fd [ 678.897609] binder: 17708:17710 ioctl c0306201 20000000 returned -14 13:41:48 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 678.928776] binder: 17708:17710 ioctl c0306201 20000000 returned -14 [ 678.965040] binder: 17708:17724 ioctl c0306201 20000000 returned -14 [ 678.975137] binder: 17718:17719 ioctl c0306201 20000000 returned -14 [ 678.987544] binder: 17718:17719 ioctl 80087601 200000c0 returned -22 [ 679.002762] binder: 17708:17710 ioctl c0306201 20000000 returned -14 [ 679.010362] binder: 17708:17724 ioctl c0306201 20000000 returned -14 [ 679.035226] binder: 17708:17727 ioctl c0306201 20000000 returned -14 [ 679.060762] binder: 17718:17729 ioctl c0306201 20000000 returned -14 [ 679.067625] binder: 17718:17730 ioctl 80087601 200000c0 returned -22 [ 679.110172] protocol 88fb is buggy, dev hsr_slave_0 [ 679.115310] protocol 88fb is buggy, dev hsr_slave_1 [ 679.120587] protocol 88fb is buggy, dev hsr_slave_0 [ 679.125664] protocol 88fb is buggy, dev hsr_slave_1 13:41:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{}, {0x1, 0x2, 0x5}, {}]}) 13:41:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x20) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x16) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x3}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) 13:41:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0209ff00060200002dbd7000fbdbdf2501001400090000000102090000800000d63a86ee221616c17c8661a11b3599a66b3610f9e4ad6f866634593654271ff302e24690bc94ad8220fcfa616b36403b2b6dc831a1d6833c3058409bea83a7769be602d101ece56e68c96a0d6587274cfa708263c829718b701d6e381c82b1ea6f5e2744a7f27373b323e2eb6a75cd42f73945a749b8bdcddfdcf7e4c9e1837e1a0a59c4da8c2d57fb0f4991d6d05f6814d0e1248b05a89c7f0c15f2022d49da223677be2c5f106efba2d7cf01ab1534c1cae62ae29f2ede21071d85f682b2dc6674b95361d7299382fe39bb036fc6c43a3427547ca362b64ef9ca0cec872822a5cdd88e8315604964e16fc9efca73feb96ea1c342abd490389a007c38f931224288098794344af4b8c87fbe6b6fac5835fc70e91119715574c6084263f367646b618b0dd4efcea6f87c26ed710b53fafbbdc27f2ead7152bb77e6492fcd852db8f2e3b5ae5b04b0cfaea7db469995def7780678836f3f2e385266b9378829d9c74d9bb9ce23eaf89f30430379bfe7086005e0410a77bb091a32c829e847ae4aa7a8b6346d1aeebbf471e4f0ba550c90b487e246668a8d7b9d2440e8e1c93e596e4014b3bab5799caca7ab857245e725bf2d03e019ea0f4e0a51aee78f776bf743a1a9b3d14f5634d6b7003b8e7e38c2f9c05cd1f5984c984c38c4d22276223379e401c970f9b914ee7f4cfa26d3f324baf4ccaaf26430bf97e411d6528ff9e4c8663fef23713b16b5193852d2a1fa14a1ff92a1e6d8487b0bead01b19155207138e52fbd424203478ae0dfeb21b0d7644e2048366ecbab8be9ad943996983d890bcc139dfbd77278ee937b13b29c2b1d1fd6d53fa4a3a58e8a0240edbb06a6c187e67288f9a31bcb499f482efd12f950fd74680663daa512cf966972b99b3eaeaa7959dd6b7f9dc06159433602982dab76fd9580bf1561f13340dce7462cba876b758e4334bf9f6440831a570091639c9f1a3dcdc2c40eaba1bdfc70823305683e672aad38c5ec271ec3d195d5dba62318848f26c8f1d3510ce9bca1d11fc52cd5284375e23f047a895c99aa382df36035a098cce1995382004714e276fae165a32b2f90902d22b626fb4138167c4bbaeae90228e52505c1dd39e2ed5847d61885a53f378106cca7a44a6d38ae0d98d3b3be3cf9e36db6e2e42bafa85da3eb2441d718899c7361e9a2e64c90d0c683c47318003e5b34dafc28f656fab6d4c043ada840287453ef220685f907d8708a0698867784100efa582bddb577557359af79be51b6f35e3a2ce53e6d7a37e93afa7ad27c44b480ab553ed5ec300e6573bcc9a2588b30fa126cdbb0f53680940c2217c2fdc54727a3149aac1682e9ae2dd8665aa71ffc725e01afd1e5987f02b915c64287c228f9678f5391626610ba7610be8bcb60c5a4a11a7f5be561f2aa2b1dab099eac1eb9e8d6be87eab64e1dc4d76170dc34147b541e0cc8ae4940e946d445e12cbe41950dd7d1056448aed5f075c58626172e48726141d0f2dad0d477721e52c488cc5a8b8033f16c84aac1353713c0454c8584bcaed7b3de0cd79fef8a711c763ecc986cd02ab05b65907f130a28720a47520c903c8fae13810a581ed04cc7b6adbd0c149ddf18378a5d08e1c2fbb833c9d6135685490bb8d7282ce7a7dfb1f4b0729eea23ca79680412657236b69e60681c36f999e8a9e9aecc29728383aee1fd2ee688ac7f2c9ea03d276594189a5be76852e2eca3d2db13a5e2ff2b5cde511afa91851d9809549f23bda1638f201ff341c6b9d8e896c774fe3e65fd1e540c8a7637a5e45b5c433b8ead318683294cc36bae1e2969c8deeb47b1ba53f1af4eaf08231705dc0949207c5651854b608e65842dcc2c9bb2ab3a145509090a44bcef18f1a98f4afe72c3ea95f14caa61c8a6b7c0c514dcddaba4b29e317ae7bc9d26d5d916cce5fca64507b8f582a5a0bd165bff5e93cb6be861d1dc2a0df32a9aff6c57de7d66728b6bc8e06094757bff47b479b3b8e83c50d597e5dc958128b227378d063aa0e8a4167b1351297ee84b8123d4888d0a171a48da9629f55ec6ccbbace72312804fa490739c7d203bd3d766510e189f2268247720c72dfe2a801e6bf662ab1eca594a2086ff8268d9ae95447934ce6a4bf5838c886ea81c360b64d473ed1bf8aec4d6d5da71fb2faf66df4d74989481a54082c3df9acf595980fe83fb0ec2a8d5805bc889658a10ae98cf4b115624c6d7c191b823356c27c7d332b75efbbd1fbe0e18bbf49a65c794d5a58293ba0c28db3060657e05a3ac56391de76090a7839cc783f9c27775a2ebc3f0b1a239f723859435f73e5e9d3b63d25efeab69c73f993fa49747c241ff841941b947dec9105e594d6c3040628ef74a04bb924ff9e7ba54c0fba6cd1cf065c66537bbe42bddee7ef57ba66aadd245e517082990b4a34d557caac7ed905267590e2ec84d13b2c0a3c0bef8826cb9e7f271846275abe7a769f27170029a19a66e59e48f4ce7f41a7330725d7e97522ace6f07e3535898e3b40995e20a956eaaa663810b7d8704928863a30f5d058ede8163fe240d3513ae33f0cffb353ed7e3a56866d6edfb668ba093f1ab7880e6ff0fb3c9eca673bcc03c50c565d4a8fb57e7d6748e18c495b6857316ea5a87841b91502bba39ae57852e6bff02af9c36c5930c79958eca014c7ba2dbab7cdb67423a62f8d4c93fd32cceb4b24d9fd3e8abf247e31c678662e23469c8ec40db4c4440f86aaae15e041ed12d37f2319d0ce0bfe0cc7c6754d6c555f97399d837f4ad02ed3b10c2b111da94c40d34abed4372f30b72f78824701f25c74e76f1fb938d02587a86a6ba8a354c0f999f5926d235d74a260e263e8413f84f8a575ca81b4258858171857798dcce99ab95bea8164a665f92ec7bd062affe0cd42c1c0ff435776210783e9017544728d73f7c7d3152a5e7c50c3c9c677bc2bb21972923596802116ec9820cb5cfd5d12af12de16a9584542cfeab00cfb253b8e9241de0eef6ccbc5a619a01736a8d5b4d88e58a26eafadec4b45ecb43a807f23b89d208e5b7c417078858379f81a8343c41358d8a001175844f09801794ce86e7f7b9c7abcbdeb996dec98744610af06e5352086011f9c39c24b71a39447f36ab3da5dde345fe97515d23eae19e594fbbeb1f7b23b89db49f7517e646a6108c025bd1e75125d1f1b6ecceb7cdafc3cd0f10b8e18fbcdecb90494fc718e382a84fe9f1e81e1c4a92ec66080de8d8d4f3e657745d1de1b79041759d636617d23a40163380ee0b516e7933911f1dc82c98c4c1cc7e775d33a63a5d9be150bb24f611699c365523d43a5a3aa82443d16e443b343142c9b7c1e690aba1862738f0582e9998800c38f49c47705743e473cbf9aaf3c97c9b856a4dc7c7e8aea3fbce206a9a9e6458a85ef902d1f9626987a8d7ed70b8b9ec9b202afdf573beb34025a9dfa4c21c8c89b3db522ac2c65043f583fcbc90a51f83924337bfa36f3dc9d411eac8ead6240162157dc5c30e9f57b06e495ac9dca38642682cd02725375d4124eb28c686cd5e2b969958a4fb13056ad2c9923fba83536db50e2e7321aa02198cb95ffc0525c0b5397681a753d5ea10baaa81870ec8de0d071f43caeed33ed2589dce8f78fa10def2b11436bf3dfadbdf7eebf386f3e106d465f168113e439f6b0fb6bd6ffb79a5ae2cd1181616acbace957a807e6c3c6e0a3870693c384c10f8ab87dc5c85224d435816134a52e5c2abeded31aeda72889778b350c9f3e2709015c6f3bda212e77ab5f657f002eb24a56fd707cfc70e9013f54f7e60ee3c32ca7f16941221eeac8ee48ff2398e992140ab0d963cb200dde0da0d3b8288a3fcdea80aad8fabdc4fecb4d1b116c9bb2521aac05311c11ee036d9dc9116b6a749fbf82b53bf9477ad59f08517c6b6ef917d6620b64096ded3bfe592d8bc8fd19c42ca8369eb86620d0493d7a5b782a4f287e01b686c271f84415e2d9bd0985520bbf8505f6a44b7656e64332eac8d2c7e8e43bd39b33197d56e67d90a7d555e76ee3b50d354acd5d2bdc124b935b0f2109e8bc8983d1cda3535f76c9820f999450aa89752ae9aa6cf4a70408e42151d4ff7401fd4fa3e3cc28ec8f5798952352002b2116e2faa3bd101cb19d26e92107b4551e2356b0ae5b911c841e7a8bb27d1360efc0d6ce3ab38ea4ead63b2324c807dfea0596dc9e3d53d2a960629727ee14fea339d9265a6ad155131412006449da7d261874905062a07a4ad80651297eb8fbc3934abca2007e318d33f0aae5f8f376cb0d5404ab4929b4f7443db16dc896122384d42ca5aba35eaa86938f08555890f6b28796f18a534b44736d37166c6ed40dae18c6d99350217213c3b3848b36a06b23d02e0972f924e8b686609ce4169b70a3407115d3e6ec70cc41d82b02140807b1b56a81a9ae0dc34465347da8ec9fe77cdbe0dd213abb7aeb07e0b1a53ff8c3f962b7ca7adee9e3b2f5170e765ddb5df98df1b0d2f8392ffa4b7742e14aefeb5986210b1004703332b00b2218b8afc1f4230d4a093d5f2e0680e4565f676a09f7a799951a5715ab7e9abfe43452bf5db0cee9007373d434dd0690f352acf3d2be26804fe3e15c8a20b450286e4b36ec61f395bfc80d00e0cad8340373d4b56c4090bba5a340d2287341d36e129fe5df0c3073ef733872b31adc264382d247eb864ff53a83b9433162ae1dcfd640d93acead455bef56a16756e009e968861ad93ecb2ab4dd00edea847e2d28234bb956a71c17a8df1201756422f459b4bb78a7d4acae5e50d1401afc953ff1f02ebc3ea5691b8a51f2eb881ebd8f84a527ee556e3e4dd821361d9438f58c32bc64c5feb99ead2e2060211bce7bc7dff75a98aff82ca76f07b976c9d6d0a15fb0c4fffc20a4537e36ec17bbc68ebf2d2c00743845c6f0b19d69b429b0161a79a70af0e033e052068ac25c1d8f9feb93e4a853bdad53b2b6285f022ccc722ae2f47dce09b4b8c93e5f0093f9b109d558dcc469594212a2f151e5921e5a558ab217d4c476420fca6e33482ba86397669b75f28aea75e8ceb04246e2d215b1041557817680c5ada95f0cd9cd5843631367a95366f2ae5ffea7fc6aa0796da70988a1644aae24fa6d2a330e8d20da2e64261c9a16c7aaacc761d2930946b31590bcf0c7defc7b01515a02ae7bc7ad8b9d944980256fc53c5aa6de9d375ff555d3fbf27a349d6d3418e02843a93058eb7a18695dd0e8cfe8a820274449d8a22e17acf593cb3cef69417a55f329420baefba374b8cbb0b28a25fc2d44af5c20fa0c6819cbe8f11425a311ec59e3a03091c7bfb99fcdea42eaaacce473a50e12a7ad62f1c0054d4b9e0485ae628ffd7844b50b2ce4692790d6c3da43cf33c5aabd2bed108b855e7d505cab2eb113999f3face91a81ddbb1ddca4e4c649f3a942237c9aee354f3ab95ee84124177abfd9a6a556c14a5334a746fc8d416964ed0c948b81b3e03fc8e5441fc6b5fc4a6a51a2ab7d5d57d08a3edf9f116b05360162ae9c76c6017922f71e9b3b9944472322d958138f37b3654c703cd51346e0de75cb5b73d423bbf31d0b9749fd80058d3fff3f3b820c53726897e9f5e0152d2daf86149e6322b37705e691873229baaefa9688cc676e3a9fe89dc8924b960d25d84aa0ecd231f77119ce1577ef19ccce19b07eb18f0821563071fdc54809ee1b95bdc384237e9e8688f018cb2d068e7389da87a4bc8a70fd79f30d0b3e242b65cd19a366cf2ce089cce354fac75a8bf9546aea58ed85c4ca246e0102001000000004d4000004d500000000"], 0x1030}}, 0xc00) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) membarrier(0x2, 0x0) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) 13:41:51 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r3, 0x800}}, 0x10) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000040)={0x20, 0x0, 0x1, 0x6, 0x400}) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400ee0a1fcec025e39cff8989f5d968a1c73fef3ce350be19c6c0aeec7838042bce54942db50f81590a63ebb113f58021", @ANYRES16=r4, @ANYBLOB="050e27bd7002ff"], 0x3}}, 0x8040) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x181001, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x8020001) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) openat(r9, &(0x7f0000000100)='./file0\x00', 0x10000, 0xa) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x8020001) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x440803, 0x0) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x8020001) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf25010000003afd070008000100", @ANYRES32=r5, @ANYBLOB="0000000086cb64aaabbf9bdbcbdaa8c2885ffa1d797bbfcf28bd9fe74b0e43e9d0d7517f14b5d002c82b03f23242e25d4f4f66990be9b250d113bd458916176ecb9bb9865f77f4e3406b8207d48f12825f970c6355a403e934fec46a810091f6b127b8f3b033105f7682ada401f2b02438b64e636b519325424691b13f58f71c4303645c439c489a0b32a500c7f4e5bb9ed755d17e88f71749466279c99e5417998ce70eec6e6c25cde87c973252c6e5f2ef168381fedae322928ce939cd0eab35201e8e82fa2d5e9bed0de9bcf68b749d818d3afb7b9d60c445f8be1d15bcf0dfe84f71aabe9a", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="000004000010000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x80) tkill(0x0, 0x16) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000400)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000003c0)=0x8) 13:41:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x200000) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000440)="81e70945074f544dcf502aaab1fe97889ad96a1f51c4e55862d978f918ecf9659cfdde67e027ec1249f9ce55915466b58632964536b8d41d1ce223b37d2ac2e898700ed00fb7b45e4a2c7f4ea2404608a5434c84960c733bd38cd1401274f89490d7148eee73ae43d0997111b55f6def6ab2b83b649e799beb84a475430ad9f38d5280bb34e690c8d9babb0d41dede55aa5af57d3d459cf841320e4c172b7aa316ab22a6d2754bdc131886beba9ac4fe69ef93e6") r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000500)=0x7f) pivot_root(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00') 13:41:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0xbe5e80dc34018f30}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x121100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000a4f000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000680)=""/213) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0xa004000) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/32) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40801, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x81, 0x1, 0xfffffffffffffffb, 0x4, 0x5, 0x9, 0x5, 0x2, 0x6, 0x7a5, 0xfffffffffffffff8, 0xe000000000000000, 0x2df0, 0xa0e4], 0x3000, 0x204}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 682.049479] binder: 17795:17797 ioctl c0306201 20000000 returned -14 [ 682.057099] binder: 17795:17797 ioctl 1 20000500 returned -22 13:41:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x4000) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, 0x0, 0x54c) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0x2, &(0x7f0000000000), 0xc, r2, 0xc}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x0, 0x1000}) tkill(0x0, 0x16) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 13:41:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/135, 0x87}, {&(0x7f00000013c0)=""/124, 0x7c}], 0x1000026a, &(0x7f0000001340)=""/42, 0x10315}, 0x20}], 0x1, 0x140010006, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x58, r4, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x170000, 0x0) r6 = socket(0x10, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffff07, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r7}]]}}}]}, 0x40}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6, @dev={[], 0x12}}, 0x10) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x170000, 0x0) r11 = socket(0x10, 0x0, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffff07, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r12}]]}}}]}, 0x40}}, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000180)={r14, 0x1, 0x6, @dev={[], 0x12}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000014c0)={&(0x7f0000001280), 0xc, &(0x7f00000012c0)={&(0x7f0000001440)={0x60, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x60008090}, 0x40000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) getsockopt$bt_BT_FLUSHABLE(r16, 0x112, 0x8, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) r17 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r17, 0x0, 0x0, 0x8020001) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r18, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r18, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:52 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xff00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xdd) fallocate(r2, 0x0, 0x0, 0x8020001) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xe, 0x0, 0xb11bbbeafa410a06) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) socket$netlink(0x10, 0x3, 0x0) [ 682.630149] net_ratelimit: 12 callbacks suppressed [ 682.630156] protocol 88fb is buggy, dev hsr_slave_0 [ 682.640298] protocol 88fb is buggy, dev hsr_slave_1 13:41:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x00\x10\x00\x00#\x00', 0x0, 0x101000) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x141140) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 13:41:52 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000080)=""/62, 0x3e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0xb0c) 13:41:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(0x0, 0xbdf, 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)={r3, r4+10000000}) creat(0x0, 0x0) [ 682.870290] protocol 88fb is buggy, dev hsr_slave_0 [ 682.875558] protocol 88fb is buggy, dev hsr_slave_1 13:41:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x244400) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) r4 = accept(r3, &(0x7f0000000240)=@rc, &(0x7f00000002c0)=0x80) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000300)={@bcast, @bcast, @default, 0x3, 0x1, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(r2) r6 = syz_open_procfs(r5, &(0x7f0000000540)='net/ig\xedp6\x14') open$dir(0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) recvfrom$unix(r7, &(0x7f0000000580)=""/4096, 0x1000, 0x20000000, &(0x7f0000000400)=@abs={0x3, 0x0, 0x4e23}, 0x6e) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) write$apparmor_exec(r6, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c10000ec32fb47081025bad6b30077f70a7c0f30f66157a96aae0000000008000000000000000200", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x21, 0x7a, 0x3017, 0x3, 0x0, 0x3}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$dupfd(r2, 0x80c, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r5, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) write$P9_RSETATTR(r6, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) [ 683.018828] audit: type=1804 audit(1574516512.881:124): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/418/bus" dev="sda1" ino=17729 res=1 13:41:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x4008, 0x7, 0x2, r3}, 0x10) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 683.165132] binder: 17853:17859 ioctl c0306201 20000000 returned -14 13:41:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200202, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000080)) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7ff, 0x420a00) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000100)=0x4, 0x8) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x400000000000122, 0x0) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) [ 683.223745] binder: 17853:17862 ioctl c0306201 20000000 returned -14 [ 683.270133] protocol 88fb is buggy, dev hsr_slave_0 [ 683.275284] protocol 88fb is buggy, dev hsr_slave_1 [ 683.280534] protocol 88fb is buggy, dev hsr_slave_0 [ 683.285618] protocol 88fb is buggy, dev hsr_slave_1 13:41:53 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) [ 683.670216] protocol 88fb is buggy, dev hsr_slave_0 [ 683.675358] protocol 88fb is buggy, dev hsr_slave_1 13:41:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) socket$netlink(0x10, 0x3, 0x0) 13:41:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000da000000c515b566dc25a1762031b67b02358ec8a4bdcc3b7950916a4f6ce8f841360886c4c165984c39b2b72442bc5ff9d712e6a5cab00d1b3902d67ddbafb7ff05d11d671c849e730d9df80202fe7d79c039fd5b0f6c964df00cdfb4c95975437be8e70d3cedc0b2fda416dc6aaf393bfd33bc91c4604971c27624907c423fbfd55e345e1030d24d3ddf8c0dfbb26872b66b4d59da522459be9cdb4f17366f01152f470387353dcdbed167ce625466039ccce50b1fdac38332bcd97c3122684ec2744775619d8de059848ee5e0e91d2c4105597d5585f12fe88cf59da3"], &(0x7f0000000180)=0xfe) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000200)={'veth0_to_bridge\x00', {0x2, 0x4e22, @loopback}}) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f00000001c0)=0xf8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) 13:41:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:54 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 684.522260] binder: 17886:17893 ioctl c0306201 20000000 returned -14 [ 684.587524] binder: 17886:17896 ioctl c0306201 20000000 returned -14 [ 684.979376] audit: type=1804 audit(1574516514.841:125): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/419/bus" dev="sda1" ino=17140 res=1 13:41:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r3, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)={{0x2, 0x0, @descriptor="19298c2e8fd8383a"}, 0x4e, [], "61b7c57bea8785019cb1b8f8577c562ba7be3adcd7a41ef9b98c0dafe30842eabb1c3fbd730d80ffefc179d5456e4df65e31451543fd73a3e52638657571d8613247969c8e36e4279ebc19beb8d1"}) 13:41:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) ptrace$getregs(0xe, 0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/20) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x88002, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000003c0)=0x3c3) 13:41:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) flistxattr(r3, &(0x7f0000000180)=""/67, 0x43) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x8) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x7f, 0x1f}, {0x81, 0x9}, 0x1, 0x80a9b9e29fdc31da, 0x3}) 13:41:55 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='#\x00', 0x0, 0x661e40) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 686.091371] binder: 17911:17915 ioctl c0306201 20000000 returned -14 13:41:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setregs(0xf, r2, 0x1, &(0x7f0000000000)="a36bbeede45455bd1f468b413c27bbd99534397ba71c7f27b280553161695e323e6ae0ea238a3621bd868ef93720cee57c8aab74c88a1657fb59f284cea5e83155f37467c2568842eca61b1fddaf315ccacd25c0983953777ce5054053b76e685909d8f7f829c1b62c3c4706a7bd5a21e46b4a4eaa8dd9beac2025d90f92f1de169a3f9c7d579de01a9ee1f6354ea3bde7d98a6519bde1fcd19153671484600abe82da2f26364ada72601998a32c1ac62c1addcc42aa525cfe3ee72ba697d2db9c0144f66224f43c97c7bcb7a86e2fc1127d9199fd4e1b7ba2d068070a5cc0f8d3e8ec5f9985765716084b6e2c") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000100)={0x5, {0x8, 0x4, 0x9, 0x4}, {0x62d2fcf7, 0x7, 0xff, 0xb71}, {0xfffffbff, 0x3}}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) tkill(0x0, 0x8000002b) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) socket$netlink(0x10, 0x3, 0x0) 13:41:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48010000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x0, 0x400, 0x2, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x20000040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000000200)={0x27, 0x0, 0x1, 0x7, 0x8, 0x7, "55af3adba370e5316f26cbdada9675fbf94660e07f9816e13d03ebfdd276d3538ff3c1cf231b0f6f7534a05d9b065f691eedebec7edc826cf142b98b6ee2b7", 0x3f}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000280)="c109e4464bf10ff9cc3a7628c8ac5030665eafc4df9b36a7daa4900fb8c633cb55784ffc08dc2f0718c845712e7a775d920a60da1d73f0e5a00526ef988682475196a9943009909d9f36d8a74cf48c660726e9961eea6689fa48d0b81aa2aff101167706fdbb1e1e6b0ca044982d40ee1366b61f93a19228e46901e87ba441234dd941e492e8bbda8bf06eda6738cadb498c6172ae88e5364ab4aafb40ffb7a0add69399572d9364ed3531c6d752b385b085e6c0fcef9c38eccaf80764cbc5", 0xbf}, {&(0x7f0000000340)="1f73d9f40cdc435af39269a7687f7a2795b4b2179de40189261f26c8ea74efe59e6d0a50ce3606375065fedda3239e20b5fe91b5871414afa8356c5cc8a77274a64f02d54aff3fe124ca786d9e7f75951bcf3fbdcc537c6b415f77e25ca2555e409a3f7e3205dfbc5e7725a102083b46562a318213f035ae8d27a793697e19d50b7eea0bd885e73922b3d6f8e533cb8f", 0x90}, {&(0x7f0000000400)="553a32a2bca09deffd0c851db49d39b78438d0efa71c599b56c9c7222d2335924e0984017a5be0748ce817d9bdfc73fd16d92b039c72fd6f33def39a0c6f5e47014c2f177c19328b5a875c697519f6fb59027debc29d15208d288e20af58ac2271004eab0c28f3f58e591e25e6109d80f8b1d379200dac913041b3ce18424240c5c306b17991f97054c0eda3e332f47b4a5c0fedf0939468489eb7bcb69b196a0d8086a417604f6f94476e607eadb2033aea", 0xb2}, {&(0x7f00000004c0)="6cc8e1813492fd21ae82f372bb7c6e66adfea40fe29a79bbf5fb4ed7d4ad9180563f31edb6af32481f0fbe5b8da27b145dbb122b006c26283143a90d0580e1776819968a4a62491ee41f75ce27f3af3c32f60f53b7a73db0d6c011c14f076d19e5684a402e72e4cc787cd5ee2b12747fb6d520cf211f3f71292c12c25522", 0x7e}, {&(0x7f0000000540)="895bece97a213a981ae7eefb7a31298b0b84f27a308943a19f67d89fec66f023662718c08e82530c37e061e2fcc5bc7bb8b7d07e29a497b65567408f6c5a4b51c020357c6d85db05a33f1320963c7a088951d3538e8d0ffcd52afca04ff62054f9323a2f09790455e07c6181a7c398ecd49420e94c8d5050f247fd716ebcd6de37a1231af8f4463eaaa29f72d6304186d094a7233a221d948777ff4ffed762f816a60d8e5cc10e70a712ecbcd536b7a07c081c61a595d0b62a608c9294d9cc7a5b99b64f9f8ddc27c2f93121192f8aadd5755f32bdd6f06de7f5c0ce67d4d406ab63aed32d3c587f157edd", 0xeb}], 0x5, &(0x7f00000006c0)={0x38, 0x10c, 0x8, "67b8fa08f30bced3f6db7622d75d66969c5bae25b28ad1d96e931cc46a03502db88325bf"}, 0x38, 0x81e290dd1d73ce88}, {&(0x7f0000000700)={0x27, 0x1, 0x2, 0x7, 0x40, 0x8, "0e8197a157c7cd48a371c491e6b52cc54c084c562b824f03ba193e2432af7877bc30c6ed9afc6e44d7772cb8cb1052e053b996997f93fb50397ede6d6961ad", 0x1d}, 0x60, &(0x7f0000000980)=[{&(0x7f0000000780)="4c1d7ae4c9d3c6fb4240de04e4bfa25472ecf73eee1800d55af252655fd54d3a060078695c696a67fa3140f402ebf26ffba9c6ca4c08c5a6d41e5c30ea2037e01336ab3a1ce9f0e1", 0x48}, {&(0x7f0000000800)="3a8f2afde3976b989b528e57a9f12fde84726159b03c3dcd81d3abba46", 0x1d}, {&(0x7f0000000840)="3254ceed528ba64cc9eeaa4a015615cdf034251388aa6f1f2c8e0907768ffe8697da4568b3a594013af2041d6727b421344c2d514db22320e64aedb6bb1163f697c0741444aa785b8e6ed85392a582a9bc9c63b1e82ba7515ab635e530a1d71280f3df0af99310d8d23f87b236836e90c39c36f1b5936f4ebebafc6936604f313c9cd61c766392a8ef7779f8134819ed8bcbdcb21b7ba429e41a65dde0e653a1b23c64b2f3b4a668cba4ea094369c71be4a823d2c2eaaf66ffc73feb5463e8014f3b89d2ee89fc20cc628ea49a70743695d47e4d7416bf42b29ee129aff3616eac23311ea94ecf0d8a", 0xe9}, {&(0x7f0000000940)="0bd919f65ce431ca70bac8ac1f", 0xd}], 0x4, &(0x7f00000009c0)={0xc0, 0x114, 0x9, "af149fc6977ab849a30b5c59da66baa927c25eec46f6c6aba6ece5831a94b1a51c843b998828bf57151cdbad5ad3778acdd51eaf0f68634f24fda58f1c42ee20b586f82692ae9b8ae94ebb76ad3e5129101d27d4eab97f361776a71074976ba5f4fa7a48362c58bd8e076daedca204bd8365ea46655c4c1d39d39b4946c2f6659847c32b21be668f7c214e948f927827b90c993602dbac97f08b397b4f87f4e4ed1f853ffb29e77481"}, 0xc0, 0x841}, {&(0x7f0000000a80)={0x27, 0x1, 0x0, 0x3, 0x5, 0x7f, "acb6473b33f00731e60dfd2be17f21efbf009ed7b8f0486a1e87796ac6c9b3d65e39b9504bb71dda1b87853c5cb1069b376dbc906c377aab485a2466a9287d", 0x16}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000b00)="d6b553ed8caaf50b9d9ac9031dd0a35174c5dcc8bf57837909e40733576ad857b70ef66670713e6712547f038218f076f22a5d8308ccd24cf4e5d7d28010449a90dcd05de6157e34bbd64be466db35881f1514132609513ea3e8bb149f47f44456aa51859fdd4a83c473d15b08e8769810a889b82e0d18d77a77f273b80e09a4d6239f149b080f566e52199a47d6de006f208c3e7a3c75e05a894b94be0e4d06d969875d6d9b1c432876c42958e6a1d917d18034db19dbe0bad001733a8246b08964914e4484eda5c98f54217c", 0xcd}], 0x1, &(0x7f0000000c40)={0xf0, 0x111, 0x4, "852a5aa284ced07b2e102e9458c0677c2218679bc5feee4a70ecc3b1cdda23c120796e87b5351b48ae63caf4df8ad49c5228b079d3dd9241ec74959f2a8c1eba91fc37b04002c1fac394e95231159184e3fefe8f3c9ca2c772d6a285dc5874e2f669cb768f02511fa23efd4a9f468b9598f0332c5b77fe44b79e2e492d0c45e061c231678070e72e3b9a50adae311195b90596c2f91b6ccf237f7034af45aed3e87077eb242a64b8c62f82dfc0bbb36163c6aee9654c5acee740c6e886c28f8d85c8c1abbc6d49a5631a0686b069cd9de891b9439ab052c35cce71a3d3f86861"}, 0xf0, 0x20080014}, {&(0x7f0000000d40)={0x27, 0x0, 0x1, 0x2, 0x3, 0x9d, "65a34700c96dc3264ab4bd16b762d383283bff318d4ba228514ad5031f5edf1bc83619ef04703da196d20fd0422fe260e1dbbe236c95855e2a2af6738145a2", 0x9}, 0x60, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="9a1bd9abc422df2423dd3ebd4915054f2ee377bfe927b7c9cabcf97aa1283e107bef9272284db497a42bd83f38aae0aa65e0020bd1e5ac0a0359a831273bf69dec5c019a51d37ac58af0e17216580352ecf38fdb9a1d8f1649374fb20daf98393647bf2dffdd379e4427dc67bb7d66d9692e9de0448c5fba77400fd8ef0db659fd310137df06fd15e16d4fee56bcdb33be5249e937b940c969475078d452b963aaa95e116eebe276560c32959eceec565563647accca220a551291bf40bec75cf6815316a43e0cce5d3609df6a722a82", 0xd0}], 0x1, &(0x7f0000000f00)={0x20, 0x6, 0x1, "0c1bd6775ae025cb51"}, 0x20, 0x80}, {&(0x7f0000000f40)={0x27, 0x1, 0x0, 0x3, 0xe0, 0xb1, "f2fa3836e1d79a0e92cbe8d4aa18e00b367ebeb599adda32d51b93bf9b844e3e7a66c1f5c370056a39292d4456645ef33bdde2152104cdcca841f4558bbec3", 0x33}, 0x60, &(0x7f00000013c0)=[{&(0x7f0000000fc0)="6810cd3ae6f84e6c1e6282912dbabfce1393d7963da248896d62a2362c4494d6cc8e54e8ac9bdf290ad1af0dc873c7f90b25ef41ea85c6bbf0bf2a1ca4af2a7d85161c959c29a44caaa977744ef07f704b", 0x51}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000001040)="16c7ab395823745d069f9aee3f680d4bb5faef8d73cc551a7d97d327581e3927c71fe50cf2dba0dadfeb86c06e0c4ff5c19c6d980622af4d1f6327350472b493e816da90fe55fdc4bfdb31de293cb8197b04f1e55ec119ede0e3d20a95fafe130405890c2bf2356065b28646c958dea17cd435ceafaea4bf16efde7c1e151244265f9fa0e33047bbe37d52d0d6bfe50bbbf8f50bc8fe47ca0fa3e5b8db0ba60817ce", 0xa2}, {&(0x7f0000001100)="c28d920474303192efc43d196a6de1805e46e88957a37ffacf6120d4f58badcef87e410cad049e1bcb73cb179965dd52909274617d5ad47cf0d5cfd7721cd184a7d68bf9d7dce1f169722e03e276b809d34253e745cb5230149f63f5210a25fec461f6834772856e80027229d42092feb15a66820a8368a825868c8b7df1b6ebbda20074a8ab4a8cb2b1c1c918621fb18716c54a585c73aff17583ace855b85e6333791074719a87dbe821d8f3e6ddaeb12e02e905c1c199146412b03b4d3210e702e205234bcd1451ac30", 0xcb}, {&(0x7f0000001200)="9d5840a9d0c09dc800d435ff71144d719bee7ba92124d9c11cb81e971c7bf1496d04642a672ef2bead2ceda0e16d1eff0e934f5accf5b5f20bb69c7a5d86d0588f4350c2462adc0216b86901ff2a95d7446ad8f8fecf58786698e32e", 0x5c}, {&(0x7f0000001280)="5826a1a9606bea9c1961c6868b87c51c74", 0x11}, {&(0x7f00000012c0)="b25f9f8d28504dff2681391cffec278ef6d661ae5a66c436ff577dacb67826c647ea65ad6414b260788fd0fafab928963131b132da1ba7a144a6ccf936595fb7203757e784a1b0cff04f95c53ee9ea2fc3f32b4c4d16547395a538837613ba47ac24e1b7", 0x64}, {&(0x7f0000001340)="1227768786111fea280d047a6c7220d8167dfee9842c3f00220f35a283f4012aa75f1a0ca0c9c0fe66028079d94ba3eb4d787450c37b4e78f91b88bc465e370d232bc10e81e677be9dc9c8844c0ec58e6db27f32558248c20228ea425fd1e7e9e5061be6", 0x64}], 0x8, 0x0, 0x0, 0x8000}, {&(0x7f0000001440)={0x27, 0x1, 0x0, 0x3, 0x7, 0x8, "f20e970feeadd4977caa27543c74b13b56e96543e83d6cef20ab92477fbb283d53cf2fc1028545035cf3083e4f6ec4cbafb420fb4b91e0ed56887419c1eb8e", 0x27}, 0x60, &(0x7f0000001540)=[{&(0x7f00000014c0)="804d845ba7c9b2a6d83ddfb6d1f6e61b6d5b40", 0x13}, {&(0x7f0000001500)}], 0x2, &(0x7f0000002680)={0xc8, 0x84, 0x10000, "96c290c0bbbdcb082e3e80c6a29987af3c80e7fd9b9369ad0a4f5404761d9891ab10e34b1f914bedf1e1a0da89a6d309172af05b89923f25ec9c27b133ea98fe56b47ea16676282524d7559d0e418db3e22dd68fbf65e119b90d2982a7d8a9633944dbf117d93cf6e695a0778e8b73193330f9f00412ef04216bfb4ef7b65734911445d390435efb94d5d9b2e68decbfad35c42b4970c6c0b1f7016e081fcb45fb52029c2fbce8afc98db513c6a24686e1"}, 0xc8, 0x80}, {&(0x7f0000001580)={0x27, 0x1, 0x1, 0x6, 0x5, 0xff, "4da8995758879eae992ff80ed06b7e29ba6fc54111f1555edd8149721212c3daf817977d72a33278b4875eee9b51cb0fdd030900b807d7e4c19ebd5187971c", 0x11}, 0x60, &(0x7f0000002980)=[{&(0x7f0000001600)="62462ee70041cec1bcafcd934617924ad3a7157dd1c426089982e581559f096276e21092e179c3c6", 0x28}, {&(0x7f0000002780)="00c9b0d6e740e4429592c3763c784beb4347c504c69d74", 0x17}, {&(0x7f00000027c0)="1dff591e2051f92e5eba82246de8f69145af17beac1e76770fa05834530925a696e3064b125b68035621f5907a4753091da99f802252273650680d262fdfb406b724f8be1b2d2f16a0b2bdb9f0cb64b408f77558fa6893f9f8c8cea3b8c86b93f2078ed37de4dd745e69dc9a6ac9e94ceb387c96b25155b39eec2a7f81cb9af2fbfb19173062d55bfe13202207a5e0592cfe51ec7069662eca0f19d832d755fa", 0xa0}, {&(0x7f0000002880)="38430fba23eda1f1da2d1d5d535055e05ffd08f75646a88c4d727182e2ad4c14c57ae998df0bd474ffcef6ff290a6e2da5d0301a18a1bf5bfd7a7f525d87951ceeb4f041c18676934b690e91469335c358230adfc17a469978019fff619af1b5bc3fed84caf60184ad9a0f161d4e274fae23966e91c009cb66708c7a417e3790b89935c5498026cb498fdc9b65cc82802dfd46460002add67431e1bd7c2f4181f51e3193b4e93395e3b5ee45952071322141c205d879daf798ab07a5a1abef8d16d089f306132bf9c894bdda5a9713728a21749b35a8ef7e216efa0d4848800d554998de42724c21", 0xe8}], 0x4, &(0x7f00000029c0)={0x78, 0x114, 0xfffe, "22be3762c809f68b07ff370cadb5abc6b959836b8ba1eadfc6fad10f20a2b85d7e89c941d548e15181374e9706fe44b0a7bf6dbc5b3055e56b1e028847793acc82d03a7528e37a346fb6c18579f52308ce0f8c432c559f2d99615722b9760dd481e7bad9a0"}, 0x78, 0x20000088}, {&(0x7f0000002a40)={0x27, 0x0, 0x1, 0x367a1afe8dbe0047, 0x3, 0x5, "6887d0139d1a8a6553e39dad5921be1428931fec45fd10f6d7e9edbab6c77381f26cbacde0617859b8afd00966698f6295798f53733bf16493fcfe6481a199", 0x22}, 0x60, &(0x7f0000004000)=[{&(0x7f0000002ac0)="604cd1ba64703e9e5f85e68a78f2569e7ff969c1042af2e7002fa770ce2fab807250ce5fd1f485ac6b0d48b54f23545eb355ee23eb6ac07e4f866f92310576834f7e81c5175d9230be5caad7456d8a7e53c74873152d0dc47804d28d0135f228c431735a5fb756496d16cef4", 0x6c}, {&(0x7f0000002b40)="995dd428b094a1263566a4d81df050890ffb3ba6648743733ed871a91b7a105a68e8019e440e2af604f63ccd0881276c0e66765b827b69b79cd05e14d43c189e7d1f32c1dbab1ac519b4b42e96cf7e45800857f2ce4ae5d38476", 0x5a}, {&(0x7f0000002bc0)="dc11dbe62e06bbeb68514aecec43f624bf8a3c7061ee5ab6280e72a728f9bb642c6f5a3c5d6b197c86dd8ae427b2eae1ccb16d5e626ef0fbe21822e17a476ef98f812971b5ef296d1f30f3becb5ccb2c8b7a9f2c12b1da273d336c74dc1f613b25b8634064283f13f4f265b8ceacd04e8ec9fd4bf65f5d93c4965a4d941f0f629944316f4ce33c5b20af7004bbe0d1460cee5d08a0c1c155bb5dad1a1ac29cb1cf748114176ffdb0bb13634865f34f5195ff80bfbc1b0b8b799d98b23c65dbe5caa5fb4fc855bf11ef282e5204d242b83b1dc8b8e772cadf19560c47862d", 0xde}, {&(0x7f0000002cc0)="7f6c1db626e317ddacbe9d07ee61", 0xe}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="b085bf", 0x3}, {&(0x7f0000003d40)="1298b407ad95c85e67638b8d72a81d26ce688bc20777d9d69f4a05d07d59f2611806d2aa5911acda104005ffa26fabba8caf7f54bd5e5a331b8d0e5e3efde3359687477204b52c6e7b6dfd3aabeab57ac2765d23bfbff5c0f65a4b3beda82421b8f80042b426945ec32853cd6dcbfda2353d525e5fe32a1d9305667f7803ee4a570f7365", 0x84}, {&(0x7f0000003e00)="594a71bfe19871825d191700baf97e2c7a762ad1051134f7bcb435aa444852bc667f685d5ee01484e4a101952e765cc9513afad8d81ee1f0a076d58ec56c77aee93ccf578aae07dc61088c589ec8b9199e1e9703d9be2e1b65449669b6886fd0477946ef53e3aa9f8307dcb1cfd10191d305bf87f995119adc89c42d61b4fc4da297614a768744e7ebc3bb140cd54d4684011fe4813716f7356366ee6439edd20c4ed59cb07a9e7bb7303d7011341a26ce517bb4a0bb01660fbf34d0e4582fce82e03f24bbdc52f2b5b134d3575dc5bbdd6e5f1fbf160aca476b483072c92563f4170851a5d8acbd5edca1b82cb5edb998d7047c14a9577b1f", 0xf9}, {&(0x7f0000003f00)="e0c15979414e74abdf1a089616b884e44e47f172694c6315dfaf5d090c4ebfc9814c57b33cf4de170195de3a84e6df9f7e48d1957ded1b79d3f3e44d4cf5ebd37aaa9eed316686f0a60e409ee593fb0497efdfefa3bcd9f91b3d5ddfa633c422cfc767ac14fca225cd73a304e271a17be2cd4ee71ff05f548be5925044a458f9d0a9806b6b768e21e48eb556498fd4400deefd18e251f06d91fa54603724cfcfccbbf107a55a84138e6a80d72a4ac14849375058755cb769a1c496132644a19265756f79183b3c0067e0ea5ece2e1afbdc68f637bc8590c4e36e92d6054e653c81ec25242240f9ec9168", 0xea}], 0x9, &(0x7f00000040c0)={0xe8, 0x20a, 0x0, "cffecb0ed664ae4c123d61c8c9d9dd041e84551207ce36dca83f1c8c94cf5dd3e9ddfe3d2d9d00f6e8047360edd64a9ec1ca65d8cc83abe388414118aa963f1905aabafff27ce72153a5dc3058a541e9e79ef18682894849335ed5bc8136cd0668aafc8af5f40760b257e93839147bba918cbfbaf9be337e1c4df4e1233ecda836016a60b9171be5c43489b567884ebe34a06a77f24639866f2c72d2a6654f6740c57f55cd1e1d9aac849ce755b1a97b1c99d7b668c37d6d9785d48f263c5e5ed2bd85e51cc1b378d1b80898d1bb4b0a4c4c631a1b02f571"}, 0xe8}, {&(0x7f00000041c0)={0x27, 0x0, 0x2, 0xc, 0xff, 0x5, "5b4425bcae4ad8dbcd536e79833f13d4c0802c63301a458e7dbf1feb64d13c9f1a35d70e9e6cd3f318af3bcfb3ef61715753aebf50ce4df50ab4cc94ac4414", 0xf}, 0x60, &(0x7f0000005480)=[{&(0x7f0000004240)="b26718dc943513d7415e75085d2255933e1a103d0a74280b8cd7160bf5e2ad20704013427ad956a7a4c952859d2a5a69ef96cb09b987b4cb730130d60156cf3d143bef4698b69a2e95ca06a2820222b219eeb66cdd19b4300e1aa3382d56f575806364e8c823b5898b743fa32eaac4b879787de92de64c35fe31e98bc8612bd175c16857bd3c96451fa028893110d7f0df9ca7be73fcc61ae4d272b90df9a7c44ccfc455bcd26969aef298ebbf8c6201a0888da26a902e2d03d6d804aa55b3e6a47f89b35648e793957d310b01417d91e982a0c7e0a53a36f0a57c6c5646f65ea97eb993eb387c832c0eca24fc97d7874212", 0xf2}, {&(0x7f0000004340)="9df24478d2e291c83a8772e7fd2d5c3b1feb074fa9a7754c8bb7e4bdc03e7c8be04751390a284fe56140dae85122de74e71c6727196ce568c8cb8a1fae6db14370c15a1a04b729d03bec24cfc7624eb49d10f50c8b", 0x55}, {&(0x7f00000043c0)="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", 0x1000}, {&(0x7f00000053c0)="e99d140309e8332633cccb3c14541c9e76986d21bbe8d6feea955a69cb82a9ed6deed41e45f25bbd4feeb0a18f34e4b21eed7282760a6e592bca3630cf7cfdf2f56a60bc70f4360ac7f76217aff6f6452201f11d6000164563fd8349001031a18a5e89cded44dec79b339911c24899c03cdab91a5bb733ed4e563136a466abde83b5e7951642ce8439b46dca0dd6cf64730f", 0x92}], 0x4, &(0x7f00000054c0)={0x28, 0x29a, 0x100, "0f6ff504f4d1ba8870f8bef43cda69c8fa8c5122ff0e24"}, 0x28, 0x84}], 0x9, 0x4) write$P9_RXATTRWALK(r6, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0x2f3) 13:41:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x66df, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = fcntl$getown(r0, 0x9) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x16) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r5, r6, 0x2}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x3) fallocate(r7, 0x0, 0x196b, 0x1) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r7, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\x88\x8d\x99\xc9#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:41:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) open$dir(0x0, 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR, @ANYRESOCT], 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18cb8810f97c97644ab8a700"}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x2000000000000010, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r6, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x48874}, 0x9001) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x10000, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 13:41:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/125, 0x84}, {&(0x7f0000000000)=""/49, 0x37}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x7, &(0x7f00000004c0)=""/104, 0x68}}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/77, 0x287}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000e40)=""/36, 0x1}, {&(0x7f0000000780)=""/229, 0xffffffffffffff5b}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x7, &(0x7f0000000900)=""/74, 0x4a}, 0x8}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/252, 0xfc}], 0x1, &(0x7f0000002680)=""/4096, 0x1000}, 0x3f}, {{&(0x7f0000000b40)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/115, 0x73}, {&(0x7f0000000c40)=""/158, 0x9e}], 0x2}, 0x203}], 0x4, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001640)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000001300)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000012c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e80)={0x3d8, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0xffffffffffffff88, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x240}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_LINK={0x184, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c71}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76785437}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x577d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff6fad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xfffffffffffffe43) write$P9_RXATTRWALK(r8, &(0x7f0000000140)={0xf9f6963095a00f1, 0x9}, 0xf) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0)=r9, 0x4) [ 686.593096] binder: 17951:17953 ioctl c0306201 20000000 returned -14 [ 686.609689] binder: 17951:17953 ioctl c0306201 20000000 returned -14 13:41:56 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 686.862452] audit: type=1804 audit(1574516516.731:126): pid=17959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/420/bus" dev="sda1" ino=17876 res=1 13:41:57 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) waitid(0x0, r2, &(0x7f0000000000), 0x1, &(0x7f0000000080)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 687.438278] overlayfs: failed to resolve './file1': -2 [ 687.471516] overlayfs: failed to resolve './file1': -2 13:41:57 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f0000000080)='./bus/file1\x00', 0x0) [ 687.830139] net_ratelimit: 18 callbacks suppressed [ 687.830145] protocol 88fb is buggy, dev hsr_slave_0 [ 687.840326] protocol 88fb is buggy, dev hsr_slave_1 [ 688.870192] protocol 88fb is buggy, dev hsr_slave_0 [ 688.875379] protocol 88fb is buggy, dev hsr_slave_1 [ 689.110331] protocol 88fb is buggy, dev hsr_slave_0 [ 689.115538] protocol 88fb is buggy, dev hsr_slave_1 13:41:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x1, {0x9}}, 0x18) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:41:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='\x00\x01\x00\x00\x00\x00\x00') fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0xfffffffb, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/69) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:41:59 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:41:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:41:59 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x3) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000180)={@remote, @ipv4={[], [], @local}, @remote, 0x0, 0x8, 0xfffc, 0x0, 0x2}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x140000) accept4$bt_l2cap(r6, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x80000) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x240000, 0x0) 13:41:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120408}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400880c}, 0x4000050) 13:41:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x2e8, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, {0x17}, [@typed={0xc, 0x44, @u64=0x3}, @nested={0x220, 0x17, [@generic="0c464d0a5c35e67e6eed0d8287f9058a26504cce546de4f860ad5aeb2240", @generic="d224f471fbce43a7507e4ddc3b31cdf84213c855c6c744d0c2417ab91fc18bae2e2f138dc20ff191c8e4f81e17ded8311a10bbeb66ba5351d33d11dd5bac4183516ba66dc5b390d24472a6a119e3fa1a47f4ce7c6ce731bd25f6c57fa2f26a4d84d492dcb5a1f6ed2139982911bdaa9835547b83f456786d1584a8d08331d99cba3278639f8a4f956057", @generic="b2c68a5cb104a827edca2af8e211e7a20f7ef20123f78369820236ba41655909940957a99612551796b13c59c87a014b3934db6987b7cf1f2075e08d7971df1f5c1374407518198471778f8110a8aea082d13e429841199760bef8d9cdc4cc6d35995eae7adbf4df45052c871451cdf81ae2dd519ae4d9cca99250a932680567246956174def59c4c5b5f328d503137c634d326763402c2c61961ef565880434189c7d601e3eaf2fc158c084d755ca630584917027563b3d58f2faa0aa8c1f69617710c6f9b2b3a60ee144", @generic="56fa65d7a54505b41328abcc23fee76cf9a7fe2133e6c167066ff9a57f8d1dbc7858e9b9c3bc907c365fa3cf9058a5414bd4ba3fbb19faa44487a80ac4163a2a9f4455e12782af0a7aae12f99ec6dac349c9b697797c3c0c58c9bfc8ac362ae5ed55be98f0518bd3d39b4b4ef94ddab17910c2a17f9a2575", @typed={0xc, 0x81, @u64=0x1}, @typed={0x4, 0x5}, @typed={0x4, 0x7e}, @typed={0xc, 0x17, @u64=0x3}, @typed={0x8, 0x63, @ipv4=@local}, @typed={0x8, 0x4, @fd=r2}]}, @nested={0xa8, 0x85, [@typed={0x10, 0x8a, @str='vmnet0em1\x00'}, @generic="8288c43ca134dd91a224dfc97280ea69ff14121ff6a907e6087605f81449304fdd5e230610baf8935fa28250922bd781cf8afa817356d99fbcdf93febbb3bb137473595a7ccec5cc0369edff63e41ce90d36dbd56f89f011406e0946f6f91d3410c4e3a3e5e42f0b884d64548c6f70320581", @typed={0xc, 0x25, @u64=0x3}, @typed={0x14, 0x6a, @ipv6=@rand_addr="846be71e3da161e7beb962c2cee8cf84"}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xa6, 0x20000) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x1, @remote}, 0x10, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:41:59 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 689.440136] audit: type=1804 audit(1574516519.301:127): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/421/bus" dev="sda1" ino=17883 res=1 13:41:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0xc, 0x0, 0x0, {0x0, 0x7, 0x80, 0x10000}}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000000)="f3f84f9d40af0e64a476444165d72dfa5fa3457b76f2a108fbb540364a14736204d969fa9f75d35e7435a216203b2ab6fc2d5295d502df9dbdfd3557397348859b7bd74b6a02a2ccaf5f7aae9bfd67b7ec321a1ed61030c3c990edc21dbfca863b32d2682922146a00fb50c9e4fa0e2614b5ac8e58affbfe7de82475265b0e43e95c3753c42491fb4fbf2edc65cc190c79acf80188f0ac", 0x97) [ 689.590118] protocol 88fb is buggy, dev hsr_slave_0 [ 689.595310] protocol 88fb is buggy, dev hsr_slave_1 [ 689.600416] protocol 88fb is buggy, dev hsr_slave_0 [ 689.605440] protocol 88fb is buggy, dev hsr_slave_1 [ 689.621804] sctp: [Deprecated]: syz-executor.1 (pid 18005) Use of int in maxseg socket option. [ 689.621804] Use struct sctp_assoc_value instead [ 689.639620] binder: 18001:18004 ioctl c0306201 20000000 returned -14 13:41:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x49a, 0x1) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x2, 0xa50c5c04a0c21eed, &(0x7f0000ffe000/0x2000)=nil, 0x7}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 689.704223] binder: 18001:18004 ioctl c0306201 20000000 returned -14 [ 690.207691] sctp: [Deprecated]: syz-executor.1 (pid 18005) Use of int in maxseg socket option. [ 690.207691] Use struct sctp_assoc_value instead 13:42:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x100901) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x3c, @remote, 0x4e20, 0x3, 'lc\x00', 0x2, 0x2, 0x1d}, 0x2c) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setpipe(r2, 0x407, 0x4f86) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x11, r0, 0x3000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x109024, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fstatfs(r5, &(0x7f00000001c0)=""/51) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000000180)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xe3edb3dde058d3a9, 0x0, 0x0, 0xfffffffffffffed7) 13:42:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x24000891) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r3 = gettid() ptrace$peek(0xffffffffffffffff, r3, &(0x7f0000000080)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) migrate_pages(r3, 0x8, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x5) 13:42:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x6}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xf, 0x0, 0x0) tkill(0x0, 0x16) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000040)="17c87b4a03cb6227ffbf46aee8be0b4bf4703c862127ab62e1c401540dfe60663e57fc5e14630d436f9ceb884db84dfe06fd7fec5dec4bf29d247fac981e053261ba584ba8ee0d46c5") write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) 13:42:00 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x1, {0x9}}, 0x18) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 690.364230] binder: 18036:18039 ioctl c0306201 20000000 returned -14 [ 690.395177] binder: 18036:18039 ioctl c0306201 20000000 returned -14 13:42:00 executing program 1: gettid() unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x202201, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r3, &(0x7f0000002380)=""/4096, 0x1000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) getdents64(r3, 0x0, 0xfffffffffffffe1a) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000001c0)={0x100, {{0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0xfffffffffffffff7}}}, 0x84) read$FUSE(r1, 0x0, 0x0) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x1, 0x0) 13:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x43) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @multicast1}, &(0x7f0000000440)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000500)={@loopback, 0xc, r2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaaae88, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3ff, 0x80000) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FICLONE(r4, 0x40049409, r5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800648e0000", @ANYRES16=0x0, @ANYBLOB="000000000000ffdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f0000000380)={0x7b}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:42:00 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:01 executing program 0: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) r7 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000001c0)={0x0, r7, 0x1}) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x16) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) write$FUSE_LK(r5, &(0x7f0000000140)={0x28, 0x0, 0x5, {{0x9, 0xe9a, 0x1, r8}}}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lseek(r2, 0x7ffffc, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8020001) bind$alg(r9, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0xc00c) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r2, 0x100000003, 0x804000, 0x28120001) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:42:01 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 691.674581] audit: type=1804 audit(1574516521.541:128): pid=18068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/458/bus" dev="sda1" ino=16596 res=1 13:42:01 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 691.960967] audit: type=1804 audit(1574516521.831:129): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/422/bus" dev="sda1" ino=16721 res=1 [ 693.030174] net_ratelimit: 12 callbacks suppressed [ 693.030181] protocol 88fb is buggy, dev hsr_slave_0 [ 693.040356] protocol 88fb is buggy, dev hsr_slave_1 [ 693.270553] protocol 88fb is buggy, dev hsr_slave_0 [ 693.276029] protocol 88fb is buggy, dev hsr_slave_1 13:42:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x8000) creat(0x0, 0x0) 13:42:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000000)='TIPC\x00'}, 0x30) sched_rr_get_interval(r2, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:03 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0xa05, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000000)={0xdfd7e026a6f1482b, 0x22b586ff, 0x1, 0x4}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) sendmsg$rds(r2, &(0x7f0000003200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000300)=""/166, 0xa6}], 0x5, &(0x7f0000003000)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x5}, &(0x7f00000003c0)=0x8, &(0x7f0000000400)=0xea4, 0x800, 0x2, 0x4, 0x7, 0x52}}, @fadd={0x58, 0x114, 0x6, {{0xfffffc00, 0x8}, &(0x7f0000000440)=0x5, &(0x7f0000000480)=0x400, 0x3, 0x1, 0x200, 0x8, 0x6e, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0xb65}, {&(0x7f0000001540)=""/180, 0xb4}, &(0x7f0000002840)=[{&(0x7f0000001600)=""/252, 0xfc}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/119, 0x77}, {&(0x7f0000002780)=""/149, 0x95}], 0x4, 0xc8, 0x80}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x1}, {&(0x7f0000002880)=""/69, 0x45}, &(0x7f0000002dc0)=[{&(0x7f0000002900)=""/82, 0x52}, {&(0x7f0000002980)=""/239, 0xef}, {&(0x7f0000002a80)=""/24, 0x18}, {&(0x7f0000002ac0)=""/85, 0x55}, {&(0x7f0000002b40)=""/217, 0xd9}, {&(0x7f0000002c40)=""/150, 0x96}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/112, 0x70}], 0x8, 0x6f2475117351ed8b, 0x100000001}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x8}, &(0x7f0000002e40)=0xc116, &(0x7f0000002e80)=0x20, 0x1, 0xc4, 0x3ff, 0xcb, 0x24, 0x101}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002ec0)=""/250, 0xfa}, &(0x7f0000002fc0), 0x40}}], 0x1e0, 0x1}, 0x1) 13:42:03 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 693.750164] protocol 88fb is buggy, dev hsr_slave_0 [ 693.755309] protocol 88fb is buggy, dev hsr_slave_1 [ 693.760512] protocol 88fb is buggy, dev hsr_slave_0 [ 693.765573] protocol 88fb is buggy, dev hsr_slave_1 [ 693.909339] 9pnet: Insufficient options for proto=fd [ 694.070146] protocol 88fb is buggy, dev hsr_slave_0 [ 694.075353] protocol 88fb is buggy, dev hsr_slave_1 [ 694.273962] audit: type=1800 audit(1574516524.141:130): pid=18068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16596 res=0 13:42:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x10) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x15d, 0xff, 0xffffffff, 0x1, 0x9, 0x7fffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x127}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) bind(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x0, "08f5e078566fbdc340aead25a3f949b6fbe26ca65657d31b53a5d8b724cd8114078dc589a8152e1512c0a26bed5f2235f74593c8800160be7f1452a6a4b5edf6b6442d21afee263fb6d550726c9bf47b741e4d24e966fb82f4785e926b8fd59e524c502b539eb25b6a9902028327f1d6efd63e66a2164326be73ee714ccf"}, 0x80) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000092638f8f0930558b2babf18f0d28e28a0b22d52318fd031479bd0333957fd75cb470b5b142f3ceca09392db6701535b3e84c180bd52c68439e245bd13a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r3, 0x3, 0x30}, 0xc) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:42:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:04 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x77, 0xfffffffffffff1c2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x400, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 694.674591] 9pnet: Insufficient options for proto=fd 13:42:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x7f, 0x1}, &(0x7f0000000100)=0x8) creat(0x0, 0x0) 13:42:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000040)="50f08a96c2e4351116bbd497fdc1616492904bff2fa1414dbcf42fa8687db117dfc6cb1f098894ef7b0a4c3d6501ff738c300cab71e0d0fb7531a4137dd2a89c0491caa568a26678b5a02a549c8e3b76e9f5d7dcd73f2a6967f56a75b2be857edc59aa87c9da43af9c9fe21a4e25bb7d9003c5c864b4ade21169ab2f602749825b9f80d89cdb6ce26c95bb6cd235e716981b040ccd", 0x95) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:04 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 694.886122] audit: type=1804 audit(1574516524.751:131): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/459/bus" dev="sda1" ino=17041 res=1 [ 695.060605] 9pnet: Insufficient options for proto=fd 13:42:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x1c8, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1ac, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1f, 0x4a, 0x1, 0x200}, {0x101, 0xfa, 0x80, 0xc89}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44000020}, 0x48084) getpid() ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:05 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 695.435680] 9pnet: Insufficient options for proto=fd [ 695.750126] audit: type=1804 audit(1574516525.611:132): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/423/bus" dev="sda1" ino=17025 res=1 [ 697.599874] audit: type=1800 audit(1574516527.461:133): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=17041 res=0 13:42:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x5, 0x2}) 13:42:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:07 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000180)="7ac67bb76e3f845a5bfce34a697ecac9ef70736d5589e293e638c40c70b0c83e71f8acf3c6f40dd8617cb39c8afef268e06a5a0d7e4f4cc25a6a6c17ad6281bdda94de401fdf7118e10b039fb8b3e9ea166b3894bbe99edc245899433f8a40e4a850eca247c33550ee731e51872cc86374820d486be6cea4e94bb598429fcc9f88b475c88e1f1c7c2eba0bf2a4f2827211f7f6f4c56857988babcf2387b8dbe38aa1c1aba5a7a57ec5445f1ed8e15c9eab27c12dddaabe506a129c328317c9d1973c311b97", 0xc5, 0x280553db, 0x0, 0x2, r2}, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x10100, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000300)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) [ 698.039125] 9pnet: Insufficient options for proto=fd 13:42:08 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)="517f1802e0d4d042b2a92bb8dd3990dc6fe7fe1a2b88f242195dc863e7fa58cce1b16eee0b2bc044afb8e269b9b2bf782844037e0f538fff0dd4ba5c4ee6cbefd2e95be535e4dfffa9ff02418df3366a8fb70125a5c6698899177dceee2e71f47ddc629d5f93e13cd2cd7b9a54faaf8288eeaa543e6cfbebd70a525cfde46db5dd2def344c4d1d6850641dfc9224ba822a26bc949929b2289ccf44049d25d732b03e95b8fd9abf4766dbbf05a960419d650b199eefee88c60ac11286e6795a95623836c9ab825be620dc75ce5baf32f24689a788b50ad86959bb5db248162f74b2e818f0c309b33d98aa2d9715cd26a86385c56c9348", 0xf6}, {&(0x7f0000000300)="5b5f2af6f3a91d6579609e2155d32d6f1379d426ae86130309f8a1130645075d63b1cfc6b1073de797e7936a26c0ac1097d597eab3608c6b210be23ca4db73a9418590adc096c973bda3d7a3d430d02b49a616f52bed16b885541991bc2d397c45ec726b0562483f295dae5a96a83804db9d152938cdb3245fec62bdc32a5733c251293beab99b401ffc9ae2ca599600ff32b6b0276e57197b1b39d58682f7e81cfb1aae2beecfd0a8b7f0399295277933029bb0404a1709f4b356e78e9cd0ff411f921f45f2153ab72e9f51f82f2273582c022f60772d11719dc8f347beefc908e32c48e6f756421204460c51038c9010ab", 0xf2}], 0x3, 0x0, 0x0, 0xc002000}, 0x10) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) kcmp(r0, r1, 0x0, r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r6, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 698.242034] net_ratelimit: 18 callbacks suppressed [ 698.242055] protocol 88fb is buggy, dev hsr_slave_0 [ 698.253869] protocol 88fb is buggy, dev hsr_slave_1 13:42:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0xffffffffffffff8b, r1, 0xc0d, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x440c00, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x350, @tick=0x6, 0x5c, {0x26, 0x6}, 0x1, 0x2, 0x80}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 698.280144] audit: type=1804 audit(1574516528.141:134): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir164304131/syzkaller.vfOYZZ/354/bus" dev="sda1" ino=17123 res=1 13:42:08 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 698.524042] audit: type=1804 audit(1574516528.191:135): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/460/bus" dev="sda1" ino=17122 res=1 [ 698.535238] 9pnet: Insufficient options for proto=fd 13:42:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x1, 0x4}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00') tkill(0x0, 0x16) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x7, 0x5, 0x4, 0x9, 0x3, 0x9}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0), 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000100)={0x3, 0x2, 0x1, 0xfffffff9, 'syz1\x00', 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(r3, 0x0, r5) 13:42:08 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 698.845859] binder: 18222:18223 ioctl c0306201 20000000 returned -14 [ 698.879145] binder: 18222:18223 ioctl c0306201 20000000 returned -14 [ 698.959763] binder: 18222:18225 ioctl c0306201 20000000 returned -14 [ 698.976148] binder: 18222:18227 ioctl c0306201 20000000 returned -14 13:42:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x80002, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}, {@access_client='access=client'}, {@nodevmap='nodevmap'}], [{@euid_lt={'euid<', r3}}, {@appraise='appraise'}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 699.165316] binder: 18233:18234 ioctl c0306201 20000000 returned -14 [ 699.270188] protocol 88fb is buggy, dev hsr_slave_0 [ 699.275324] protocol 88fb is buggy, dev hsr_slave_1 [ 699.510523] protocol 88fb is buggy, dev hsr_slave_0 [ 699.515951] protocol 88fb is buggy, dev hsr_slave_1 [ 699.739562] audit: type=1804 audit(1574516529.601:136): pid=18242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/424/bus" dev="sda1" ino=17163 res=1 [ 699.990206] protocol 88fb is buggy, dev hsr_slave_0 [ 699.995408] protocol 88fb is buggy, dev hsr_slave_1 [ 700.000599] protocol 88fb is buggy, dev hsr_slave_0 [ 700.005685] protocol 88fb is buggy, dev hsr_slave_1 [ 700.967346] audit: type=1800 audit(1574516530.821:137): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=17122 res=0 [ 701.037640] audit: type=1800 audit(1574516530.881:138): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="bus" dev="sda1" ino=17123 res=0 13:42:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x49, &(0x7f0000000180)="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") write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = socket(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x3f, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x1) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x40}, 0x10) 13:42:11 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) capget(&(0x7f00000000c0)={0x19980330, r3}, &(0x7f0000000100)={0x7, 0x4b0d, 0x2, 0x40000000, 0x5, 0x5b}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syslog(0x9, &(0x7f0000000180)=""/181, 0xb5) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = accept4$rose(r4, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@netrom, @netrom, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000040)=0x40, 0x80800) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) creat(0x0, 0x0) 13:42:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2009001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x408, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x4000000) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 702.116859] audit: type=1804 audit(1574516531.981:139): pid=18262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir164304131/syzkaller.vfOYZZ/355/bus" dev="sda1" ino=17170 res=1 13:42:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0xb6aa5dc338be1bfe) 13:42:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x0, 0x0}, 0x10) dup2(r0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r1, 0x0, 0x173, 0x20000004, &(0x7f0000000280)={0xa, 0x4e02, 0x3, @mcast1, 0x4}, 0xffffffffffffffcf) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 13:42:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r0, 0x10, 0x0, 0x2000000, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x1000) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:12 executing program 1: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) init_module(&(0x7f0000000040)='/dev/kvm\x00', 0x9, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0xf4e34db5642958ef, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x39, 0x92804) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x1c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x84}, 0x1, 0x0, 0x0, 0x20030011}, 0x88c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000300)={0x0, @local, 0x4e21, 0x3, 'nq\x00', 0x49727e0a21cf6afe, 0x6f, 0x76}, 0x2c) creat(&(0x7f0000000140)='./file0\x00', 0x0) poll(&(0x7f0000000280)=[{}, {0xffffffffffffffff, 0x6020}], 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:42:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10006}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68c4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000801}, 0x20000800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0xfffffffe}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tkill(r4, 0x5) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x101100) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000380)=ANY=[@ANYBLOB="bb000000b9e1c5f0790633adac25b50b45127cea0c78e0a576388fcfb4ae8d00af54d289aa0c083d53dc5e04fba75d5c14033b715219ab7b403e61e25536e3c873ecfbc3fb93c714b7f71d9b95930cd88bf5463ea94d6dee6be2425fa7a6d221073f2df539180e538b975a5842951335fd68b3ae7c92c4c6e49199c0f732addc09ee90ff0f0000e1693be621aedd2f477d3c7b777bd0c85d27024e34b6b0738099b557170ed44d03ade0372f2f6c5a5e421cb11e048876d1eccf2900"/203]) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 702.642200] audit: type=1804 audit(1574516532.511:140): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir164304131/syzkaller.vfOYZZ/356/bus" dev="sda1" ino=16691 res=1 [ 702.915027] audit: type=1804 audit(1574516532.781:141): pid=18308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/425/bus" dev="sda1" ino=16561 res=1 [ 703.430154] net_ratelimit: 12 callbacks suppressed [ 703.430161] protocol 88fb is buggy, dev hsr_slave_0 [ 703.443133] protocol 88fb is buggy, dev hsr_slave_1 [ 703.670147] protocol 88fb is buggy, dev hsr_slave_0 [ 703.675323] protocol 88fb is buggy, dev hsr_slave_1 [ 704.150149] protocol 88fb is buggy, dev hsr_slave_0 [ 704.155329] protocol 88fb is buggy, dev hsr_slave_1 [ 704.160582] protocol 88fb is buggy, dev hsr_slave_0 [ 704.165687] protocol 88fb is buggy, dev hsr_slave_1 [ 704.470155] protocol 88fb is buggy, dev hsr_slave_0 [ 704.475296] protocol 88fb is buggy, dev hsr_slave_1 13:42:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x9fbc, 0x2, 0x9, 0x6, 0x1}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:15 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012000c00010094f5a97c25f48250707e4f3e239844f7766574680000000018000200140001000000000065878b8386", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000403f1ffffffde000000080001007a7462001c000200180002100300000000010000000000000800000000000000bbb38a53d2204bf5cbedf50aacee1c47a44426ec70dc0f783ebd16712fccc01eb9d8943dc7ea29845146036c4ccff498fc991d09558173fda85dac5f00000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002800070500"/20, @ANYRES32, @ANYBLOB="00da00000000ffff000000000c000100677265640000000004000200"], 0x34}}, 0x0) 13:42:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2000000000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7000000}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc0000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe00}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 13:42:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000300)=""/126) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_crypto(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x8, 0x6}}, 0xe) [ 705.323871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x421, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x12000801}, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) fcntl$setown(r4, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 705.406865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000080)=0x3, 0x4) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/raw\x00') r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x400640) connect$vsock_dgram(r4, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) 13:42:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x21, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1, r2) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e24, 0x7, @local, 0x9}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x7fff, @empty, 0x79c2}], 0x88) r5 = add_key(&(0x7f00000001c0)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1, r5) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$search(0xa, r3, &(0x7f0000000100)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, r6) r7 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400100) connect$x25(r7, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r8, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') socketpair(0x2, 0x134b9b0078c6e87b, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="01000100", @ANYRES16=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20042084}, 0x4004094) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r5, 0x7}, &(0x7f0000000340)=0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x805, 0x3, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmmsg$sock(r2, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="32f8f76659a52df16b3b7bb12a295b8ac5c5192a8d4f07c538aadb9bf4ea6e24ece948cf2d5c8867d2d48b4339b936bbd0d20695d9d5f16709", 0x39}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6b8e}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xc0}}], 0x1, 0x8000) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x2, 0x5, 0x7f, 0x0, 0x43, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bba, 0x5, {0x6, 0x27ffa57f3ac2c33e, 0x2, 0x6, 0x0, 0xf5, 0x0, @in=@local, @in6=@rand_addr="9ec338562d43082ab7ff6b6ba11b5ccb"}}, @sadb_lifetime={0x4, 0x3, 0x1698, 0x2, 0x3ff, 0x732}, @sadb_address={0x5, 0x29, 0x33, 0x80, 0x0, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @empty}, 0x1ff}}, @sadb_lifetime={0x4, 0xc513e6e78eaf24e8, 0x8001, 0x3, 0x8, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sec_ctx={0x21, 0x18, 0x9, 0x0, 0xfa, "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"}, @sadb_x_nat_t_port={0x1, 0x35, 0x4e24}, @sadb_x_sec_ctx={0x8, 0x18, 0x2, 0x1, 0x33, "209e184f48e69b7e4644d38c2ecec19b7ac7fb94c1f30084a1e1218c86b1c39460f99c6122d14611f7c23684102649a55c0859"}]}, 0x218}}, 0x0) [ 706.445588] audit: type=1804 audit(1574516536.311:142): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/426/bus" dev="sda1" ino=16929 res=1 [ 708.630154] net_ratelimit: 18 callbacks suppressed [ 708.630161] protocol 88fb is buggy, dev hsr_slave_0 [ 708.640291] protocol 88fb is buggy, dev hsr_slave_1 [ 709.278621] audit: type=1800 audit(1574516539.141:143): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=16929 res=0 13:42:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000240)=0xe8) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x840) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:19 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, 0x0, 0x0, 0x0) 13:42:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000300)=""/126) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_crypto(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x8, 0x6}}, 0xe) 13:42:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x16) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = gettid() ptrace$setregs(0xd, r3, 0x1, &(0x7f0000000040)="18ef0008000000000000fd7201e4a2") write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') socketpair(0x2, 0x134b9b0078c6e87b, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="01000100", @ANYRES16=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20042084}, 0x4004094) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r5, 0x7}, &(0x7f0000000340)=0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x805, 0x3, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmmsg$sock(r2, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="32f8f76659a52df16b3b7bb12a295b8ac5c5192a8d4f07c538aadb9bf4ea6e24ece948cf2d5c8867d2d48b4339b936bbd0d20695d9d5f16709", 0x39}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6b8e}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xc0}}], 0x1, 0x8000) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x2, 0x5, 0x7f, 0x0, 0x43, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bba, 0x5, {0x6, 0x27ffa57f3ac2c33e, 0x2, 0x6, 0x0, 0xf5, 0x0, @in=@local, @in6=@rand_addr="9ec338562d43082ab7ff6b6ba11b5ccb"}}, @sadb_lifetime={0x4, 0x3, 0x1698, 0x2, 0x3ff, 0x732}, @sadb_address={0x5, 0x29, 0x33, 0x80, 0x0, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @empty}, 0x1ff}}, @sadb_lifetime={0x4, 0xc513e6e78eaf24e8, 0x8001, 0x3, 0x8, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sec_ctx={0x21, 0x18, 0x9, 0x0, 0xfa, "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"}, @sadb_x_nat_t_port={0x1, 0x35, 0x4e24}, @sadb_x_sec_ctx={0x8, 0x18, 0x2, 0x1, 0x33, "209e184f48e69b7e4644d38c2ecec19b7ac7fb94c1f30084a1e1218c86b1c39460f99c6122d14611f7c23684102649a55c0859"}]}, 0x218}}, 0x0) [ 709.670197] protocol 88fb is buggy, dev hsr_slave_0 [ 709.675419] protocol 88fb is buggy, dev hsr_slave_1 13:42:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') socketpair(0x2, 0x134b9b0078c6e87b, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="01000100", @ANYRES16=r6, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20042084}, 0x4004094) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r5, 0x7}, &(0x7f0000000340)=0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r1, 0x805, 0x3, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmmsg$sock(r2, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="32f8f76659a52df16b3b7bb12a295b8ac5c5192a8d4f07c538aadb9bf4ea6e24ece948cf2d5c8867d2d48b4339b936bbd0d20695d9d5f16709", 0x39}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6b8e}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xc0}}], 0x1, 0x8000) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x2, 0x5, 0x7f, 0x0, 0x43, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bba, 0x5, {0x6, 0x27ffa57f3ac2c33e, 0x2, 0x6, 0x0, 0xf5, 0x0, @in=@local, @in6=@rand_addr="9ec338562d43082ab7ff6b6ba11b5ccb"}}, @sadb_lifetime={0x4, 0x3, 0x1698, 0x2, 0x3ff, 0x732}, @sadb_address={0x5, 0x29, 0x33, 0x80, 0x0, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @empty}, 0x1ff}}, @sadb_lifetime={0x4, 0xc513e6e78eaf24e8, 0x8001, 0x3, 0x8, 0x5}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_sec_ctx={0x21, 0x18, 0x9, 0x0, 0xfa, "afc2c1a8fab46a4084dcbc6b1d3f315b0524f0a206ade80ea1676776195e7f8e8d331073329bd91613782cbb47fff46c59e09aa6435604a7f415f90f4f379446324f81caa9755424a74f18bd03536ca1dbc29defe8a3d594f7405195ccdb026590eb26909ff850a0460c6db08c161011b3a15fe2e29cc2b07216fa2bec12192831ae376aa3ce14d28c4b8384230acac0f435d13cb466e86be9e3be2755e18f71d074b0e003a54c245c6c921048d9c06184188d55dff20d4999c584b6d2edee3be60ebb05193e9c92af30e28c06df7aeea4c86fc51c1d6978c3b8ae6f8a1d5d668eff8f963d711beca7c8c52222e1556f0ef0071d09e1c4965f9c"}, @sadb_x_nat_t_port={0x1, 0x35, 0x4e24}, @sadb_x_sec_ctx={0x8, 0x18, 0x2, 0x1, 0x33, "209e184f48e69b7e4644d38c2ecec19b7ac7fb94c1f30084a1e1218c86b1c39460f99c6122d14611f7c23684102649a55c0859"}]}, 0x218}}, 0x0) [ 709.817571] audit: type=1804 audit(1574516539.681:144): pid=18409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/427/bus" dev="sda1" ino=17183 res=1 13:42:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) bind$x25(r2, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2995cb3c) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f00000000c0)={0x0, 0xffff, 0x8, [], &(0x7f0000000080)=0x80}) creat(0x0, 0x0) [ 709.910519] protocol 88fb is buggy, dev hsr_slave_0 [ 709.916024] protocol 88fb is buggy, dev hsr_slave_1 13:42:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r3, 0x11) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, [0x17, 0x9, 0x100000000]}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x49030005}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x45884) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) write$P9_RMKDIR(r6, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x1, 0x2, 0x8}}, 0x14) 13:42:20 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, 0x0, 0x0, 0x0) 13:42:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x2100c0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xfffffff8, @local, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e22, 0xff, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x50, @mcast1, 0x7fff}, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @remote}, 0x8}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x40c}, @in6={0xa, 0x4e24, 0x101, @ipv4={[], [], @multicast2}, 0x5}], 0xc8) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000001580), 0x4) [ 710.390133] protocol 88fb is buggy, dev hsr_slave_0 [ 710.395373] protocol 88fb is buggy, dev hsr_slave_1 [ 710.400867] protocol 88fb is buggy, dev hsr_slave_0 [ 710.406103] protocol 88fb is buggy, dev hsr_slave_1 13:42:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x808a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) creat(0x0, 0x0) 13:42:21 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000200000000613ebf80395a6bf20aa73dc38e1875673422335d125f739d7de461f3d52ee905e9f4d0c4a9482ac0c6c608858cb5d0fff720cd52833214ad64421b590b719093ec676200b7f81b559bd6773650418735fd55248afa7ad9aea09e4d666fd0b87338282c809c2f3182ee2801064eafb87f565e420ef84c2b2e8bc328a778345f00c78e4292f9732d1f0af7f87fe42a1094b5ea0783a0d44a18a8d8186d808f10e8db2458d6d3a66497c6d4525226257cfb5daea35cc56c781dd8871f0a5ea808d58c52ebfc178ea22cdc6b338c0787a0d1de38c8a774732843eb517d9b4f3b58823c6266bffec1ac192a88a78a1a42f50573411a98fee12e5f944cc5ef4790605c7933b2b9c4a2bbfeee22a62b1326224d07a31b3a375e1e85e0f270d265849d37c18ad32436087b4bd429b2050aa869afbdf2e18f34e0d0baa1b9bd6129d2104a378b831b5970f8616403c5276088c136b98b5d44ef619745984cc76a34409b90cca6fa1ca888da1e12805894c163ad3aa25edb59a4f5d7d533fa31489b3c270f9544958c81adcfa70e57a30000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020700000200000000000000000000001f9e61bd01c4609f5c2d4392553faa8f3040127683332f5eddb2025f3e70885d6a259406bc58865711b26acd041e4dccd4477c9d52c9b479ca95e4f655d6cbdbdd030000000000000009cb9c9ef21340440cac1eadb93def086f7bc8641de0993e1e81763a490220d191c7c81c76bc0042460200000081be0058cb01e5e98fcd68e9ade41ffecabea82f21eb3f8de759967b2bbd1565162c6c9d02196c003aaabc61b396cda21c9654fd0566b39f048baafa78dc6657bb1a641b038030587a48bdfa0b80b55b4851da5df198e82294c14fe0127a118c956880d4ff2cc23f08ec8a0dca"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x5, 0x9, 0x1, 0x5, 0x2000}, &(0x7f00000000c0)=0x98) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:42:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r3, 0x11) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, [0x17, 0x9, 0x100000000]}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x49030005}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x45884) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8020001) write$P9_RMKDIR(r6, &(0x7f0000000200)={0x14, 0x49, 0x2, {0x1, 0x2, 0x8}}, 0x14) [ 711.801375] audit: type=1804 audit(1574516541.671:145): pid=18491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/428/bus" dev="sda1" ino=17184 res=1 13:42:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/ip6_flowlabel\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000240)={{0x6, 0x6, 0x0, 0x5, 0x19, 0x9}, 0x20, 0x80, 0xff, 0x3, 0x7, "7a9319962f7fbfc1b788065a8051b97d5a961682a8d7f23579b101577269341f88bbb071d65e337296a4e662b014a39f985305304bbc7f78aad9b7c80d8ab9c1adc5ed19fd1532987a75d825bbb82ee25e33e8a94fa5e3db97293e9b80258bbc9c4c19bc6d714139231908f1c9d49813601e81784c76762ac1befe897e59e559"}) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8}, 0x10) mount(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) r3 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x2}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60d8652b00140600fe8000000000a8dd1244843aea6200aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) request_key(&(0x7f0000000440)='.dead\x00', 0x0, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 13:42:22 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, 0x0, 0x0, 0x0) 13:42:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="8000a900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x9, 0x3, 0x8000, 0x80000001, 0x180}, 0x14) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:22 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/policy\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) mq_timedsend(r6, &(0x7f00000007c0)="4456401215b0c13afd89158464788962a19f137746929c94e8581ae5d534c1cc5b", 0x21, 0x8001, &(0x7f0000000840)={r7, r8+10000000}) fallocate(r5, 0x0, 0x0, 0x8020001) sendmsg$nl_route(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x9000604}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv4_getnetconf={0x24, 0x52, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x20}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffccc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000700)='./bus\x00', &(0x7f0000000740)='./bus\x00') write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) accept4$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c, 0x81800) r11 = fcntl$dupfd(r0, 0x406, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"ee7f0ac654d997a70b8748d1cb83ad7c5e9082cee6cd84bb8a63c6452e98659014512448323a0a37e32c8adb750c02713c40718af2a2464acc97ce0155102a489678e608aeb6da17540645c2f08a91632a4070d5b0a039cdd64eec7ac51435341a5e2a1ff7b8e4bd51f548a81f338817756d5eff55558979e8ffc4b03425c8d61edf71f5a411112134029ba84ab2d823d07db80683f98589495f39d3f1820b7d5a3579c77a840fa59f2056f0d4f7e9c5f6d3b91ad68c8c879e2d0648ea6f3c4ef071280e47bdb5fcde1159e63f0380efb4f0b0c3babdaee9c775e3e43f3f80b84b0ced69727970a3a43da9945127daaa669dd7f923789a52a32a581adcba1313f7f1e9cd642397be5f09f6a39853fdc8787830b8dc803d8e40194dc6b44296eab3e96e18a1d5aef83f245e091948bc5cc0c4b3e222f31a14faec795f515d5114e706e93cbe6c0fccf82625fc1f5100576da5b7a9a394b5a7711dff057d41d33ce1e6efe31ad2fb675fec9a348aac72c02c8346e7df8ede01997ca8bf4be96d34ba79bf4baa411712991a7689558431aafdb329ccde294bbcae7b0d999dd92010c073f71cebbc9484c6ceb8349e76e4b1eedbb0ba228ba14841f063c9efe2978812baa8f08b7dc744ec5a12ff308c28e46a48ddc0ee7555e6c49adbdf177d0310d10d336e32252e1b73b8af8712da1c2a61f46e2ba0adcfa316dd71cbb673b4401a8466b01cbe5c733342b00d4177ff96d20c7f69ada446f3e5fc175371a420af29ae0bb53441f5e61847783f46bb3175548fe0ddb454af7f30ff90b3a42f29d5a9c61ec8623fdd3f4272463b60080f13153afc95d45c7c9b8473e21fa886c2eed7776c0c823b3cc02fb9efca882bbd32cd63b5d5b19e8d85cb2632c9ccef3c871250cc7822e9c5c22d24581dcb4d5aaa752b04b2eef08be4a9681bcb9a7fcdc823e3bbd783b8409fc3f43efe232e3d4b503148a7bc248a6bd3b3487e48d4aaff0f19fba7730749f33e8a9882fd78f90df670b9fd4514f6af44b00a4624f96246c3dc3e81d200978ae860432691f0a0d38d8a13b668b7ae777aad8ca0091e58775fdbbbe9b0b0526ec36dcd45c3a039aa13d39e3d3ca945faa0398a9a7d7ec6ef07fb1bc62662a124053ee35657f294d59fd972c572e32abc5cfb2bb77ec7747d8142f8525725f753bcd993e1db7fd9907381bf4141fc91806a9b8c22f5741c0605ff0761b86c1bdca47a167a73a64e3b670830498cc0ca7cd97d7fa30c1e15711c3b7c56ab5f97ccaa29304b11884cfd4cc633ee6c3cfdc0aea683aa7b1d6241b05f67c21ffdbd830acf653b1c9ad73a6ddb8d5f6c3860b2bdc2f9bc3ff76b1f323f14637ab88cea576de7d32bbb95d7825600da355108e370e649e36b6aadb386b6bb633e5c2690caba3a5fcb56a360faeda81cab1dbc4506f6f9e000b20061"}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:42:22 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x800, 0x1001, {{}, 0x0, 0x6, 0x0, {0x5, 0x19, {0xffffffff}}}}, 0xfe18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) accept4$x25(r4, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80c00) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000100)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) getdents(r4, &(0x7f0000000080)=""/118, 0x76) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0c500}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'gretap0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) [ 712.554279] binder: 18502:18503 ioctl c0306201 20000000 returned -14 [ 712.575835] binder: 18502:18503 ioctl c0306201 20000000 returned -14 13:42:22 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6, 0x100000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x1000002, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000380)={0xe95, 0x9, 0x6}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r5, 0x80045113, &(0x7f0000a07fff)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0xfffe, 0x9, 0x4, 0x200, 0xa90, 0x6, 0x9, 0x40}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @empty}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x0, 0x2, @mcast2, 0x9}}, 0xf}, 0x90) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x200) sendfile(r7, r8, 0x0, 0x7fffffa7) creat(&(0x7f0000000580)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./bus\x00', 0x240, 0x0) [ 712.595818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.609606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.629353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.768226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.794450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.807223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.855659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.904790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 13:42:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000003c0)=0x2, 0x1) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10003, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000200)={0x3ca57498, 0x4, 0x7ff}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0xc) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, &(0x7f0000000180)) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@alg, &(0x7f00000001c0)=0x80, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 712.945002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 [ 712.985778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=18508 comm=syz-executor.1 13:42:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0xc0a1bcce4ecbf2c3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x24040044}, 0x4000000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) dup2(r4, r5) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x28, 0x0, 0x8020001) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000040)={0x0, 0x15}, 0x2) tkill(0x0, 0x16) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x2c) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 13:42:23 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800006, 0x2012, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @reserved="3d8b2881a3555009d1a313554eb44aa3c1b4de88e02140534976982275f4e114"}}) 13:42:23 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 13:42:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x177, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x24, 0x25, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x18) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl(r0, 0x2, &(0x7f00000002c0)="ff1f58cf9906db77aadec1d232ecb6a63f3ae45594b92a736e0a144a4a591e6038381cf05e5e0578ade0384dda0eaab6faaf87bfd5d274bc551d45933ffb0a2498f7bb00a9037cf7daa8465f430e59187124341be1ff3b0d133866feb617bf224bbec0790903b79394402799a0c2") getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="590086f508deba85c3b5cbdd1e22f388c88e44884794b7cd0de59542d4c31f51cefb932ef4fef1ef6dd4d18ad2a6c3b78e1b92e4c60500000000000000f13f65ef445fe90c4b2bd028658a703f755556b6df61d938686eed7604f29c5b"], &(0x7f0000000200)=0x61) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000740)) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000340)) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x4000) 13:42:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000005b40), 0x400000000000122, 0x0) creat(0x0, 0x0) bind(r1, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) 13:42:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x40000}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) socketpair(0x10, 0x80000, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCRSACCEPT(r2, 0x89e3) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) [ 713.740667] batman_adv: batadv0: Removing interface: veth5 [ 713.757423] batman_adv: batadv0: Removing interface: veth7 [ 713.785151] batman_adv: batadv0: Removing interface: veth13 [ 713.802016] audit: type=1804 audit(1574516543.671:146): pid=18544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/471/bus" dev="sda1" ino=17198 res=1 [ 713.831005] net_ratelimit: 12 callbacks suppressed [ 713.831023] protocol 88fb is buggy, dev hsr_slave_0 [ 713.841699] protocol 88fb is buggy, dev hsr_slave_1 [ 713.856078] batman_adv: batadv0: Removing interface: veth15 [ 713.882788] batman_adv: batadv0: Interface deactivated: veth17 13:42:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x4, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x7fffffff}}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 713.924498] batman_adv: batadv0: Removing interface: veth17 13:42:23 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @empty}, 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x38, @rand_addr="cb395967890103761f3dc224874b793a", 0x3}, @in6={0xa, 0x4e20, 0x3, @empty, 0x3}], 0x84) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x200500, 0x0) renameat2(0xffffffffffffffff, 0x0, r4, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x294ad, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0xdf, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) getdents64(0xffffffffffffffff, &(0x7f0000000a00)=""/209, 0xaf) write$cgroup_type(r1, &(0x7f0000000200)='\x00\x02readed\x80', 0xffffffad) mremap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000006000/0x2000)=nil) flistxattr(r2, &(0x7f00000003c0)=""/189, 0xbd) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 713.968495] batman_adv: batadv0: Interface deactivated: veth23 [ 714.007128] batman_adv: batadv0: Removing interface: veth23 [ 714.055130] batman_adv: batadv0: Removing interface: veth31 [ 714.070150] protocol 88fb is buggy, dev hsr_slave_0 [ 714.075609] protocol 88fb is buggy, dev hsr_slave_1 [ 714.082883] batman_adv: batadv0: Removing interface: veth33 13:42:24 executing program 5: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x400, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x9}}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 714.115099] batman_adv: batadv0: Removing interface: veth43 [ 714.153144] batman_adv: batadv0: Removing interface: veth47 [ 714.189542] batman_adv: batadv0: Removing interface: veth51 [ 714.236433] batman_adv: batadv0: Interface deactivated: veth73 13:42:24 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x5, 0xfdc7}}, r0, 0x1000, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0xffffffff80000000, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) [ 714.292227] batman_adv: batadv0: Removing interface: veth73 [ 714.336827] batman_adv: batadv0: Removing interface: veth75 [ 714.373586] batman_adv: batadv0: Removing interface: veth81 [ 714.397621] batman_adv: batadv0: Removing interface: veth91 [ 714.423610] batman_adv: batadv0: Interface deactivated: veth97 [ 714.443063] batman_adv: batadv0: Removing interface: veth97 [ 714.466334] batman_adv: batadv0: Removing interface: veth99 [ 714.489977] batman_adv: batadv0: Interface deactivated: veth101 [ 714.511833] batman_adv: batadv0: Removing interface: veth101 [ 714.538066] batman_adv: batadv0: Interface deactivated: veth119 [ 714.550127] protocol 88fb is buggy, dev hsr_slave_0 [ 714.555279] protocol 88fb is buggy, dev hsr_slave_1 [ 714.560520] protocol 88fb is buggy, dev hsr_slave_0 [ 714.565686] protocol 88fb is buggy, dev hsr_slave_1 [ 714.565948] batman_adv: batadv0: Removing interface: veth119 [ 714.635552] batman_adv: batadv0: Removing interface: veth129 [ 714.664482] batman_adv: batadv0: Removing interface: veth133 [ 714.697464] batman_adv: batadv0: Removing interface: veth137 [ 714.729018] device bridge_slave_1 left promiscuous mode [ 714.755675] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.834108] audit: type=1804 audit(1574516544.701:147): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/429/bus" dev="sda1" ino=17182 res=1 [ 714.870134] protocol 88fb is buggy, dev hsr_slave_0 [ 714.875306] protocol 88fb is buggy, dev hsr_slave_1 [ 714.884193] device bridge_slave_0 left promiscuous mode [ 714.889846] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.724849] device hsr_slave_1 left promiscuous mode [ 715.774139] device hsr_slave_0 left promiscuous mode [ 715.834318] team0 (unregistering): Port device team_slave_1 removed [ 715.878781] team0 (unregistering): Port device team_slave_0 removed [ 715.934368] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 716.008918] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 716.154460] bond0 (unregistering): Released all slaves [ 716.607302] audit: type=1800 audit(1574516546.471:148): pid=18544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=17198 res=0 13:42:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:27 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000300)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f0000000500), 0xfffffffffffffdc9}], 0x1000000000000201, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = add_key$user(&(0x7f00000000c0)='\x87ser\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r6, r5, r5}, &(0x7f0000000840)=""/243, 0xf3, &(0x7f0000000100)={&(0x7f0000000180)={'rmd320-generic\x00'}}) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000100), 0x1f, &(0x7f0000000140)}}], 0x400000000000128, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000940)={0x907, {{0xa, 0x4e20, 0x0, @local, 0xc1b8}}, {{0xa, 0x4e21, 0x1, @mcast2, 0xb89d}}}, 0x108) request_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f00000002c0)='^\xfcs\xbc\x00', 0xfffffffffffffffe) socket$kcm(0x29, 0x5, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='rmd320-generic\x00', r2}, 0x10) [ 717.966003] audit: type=1804 audit(1574516547.831:149): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/430/bus" dev="sda1" ino=16929 res=1 [ 718.851465] IPVS: ftp: loaded support on port[0] = 21 [ 719.030130] net_ratelimit: 14 callbacks suppressed [ 719.030134] protocol 88fb is buggy, dev hsr_slave_0 [ 719.040270] protocol 88fb is buggy, dev hsr_slave_1 [ 719.725043] chnl_net:caif_netlink_parms(): no params data found [ 719.759005] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.765479] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.772804] device bridge_slave_0 entered promiscuous mode [ 719.779400] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.786166] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.793636] device bridge_slave_1 entered promiscuous mode [ 719.809008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 719.818464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 719.839613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 719.847750] team0: Port device team_slave_0 added [ 719.853668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 719.860885] team0: Port device team_slave_1 added [ 719.866261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 719.873954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 719.922307] device hsr_slave_0 entered promiscuous mode [ 719.960417] device hsr_slave_1 entered promiscuous mode [ 720.000802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 720.007972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 720.021183] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.027706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.034461] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.040836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.070496] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 720.077893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.083934] protocol 88fb is buggy, dev hsr_slave_0 [ 720.083986] protocol 88fb is buggy, dev hsr_slave_1 [ 720.097518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 720.106281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.113838] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.120625] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.129873] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 720.138721] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.147427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 720.155174] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.161702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.171833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 720.179353] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.185731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.201332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 720.208930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 720.218257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 720.230180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 720.242739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.253399] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 720.259446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 720.266467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 720.279379] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 720.287887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 720.294920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 720.306267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.310125] protocol 88fb is buggy, dev hsr_slave_0 [ 720.317422] protocol 88fb is buggy, dev hsr_slave_1 [ 720.370172] protocol 88fb is buggy, dev hsr_slave_0 [ 720.375293] protocol 88fb is buggy, dev hsr_slave_1 [ 720.490199] protocol 88fb is buggy, dev hsr_slave_0 [ 720.495303] protocol 88fb is buggy, dev hsr_slave_1 [ 720.720679] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 13:42:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x4080) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) 13:42:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 13:42:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b70654e9126737c05a8fb02beb880c5e0f0000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) ioctl$KDMKTONE(r0, 0x4b30, 0xfffffffffffffff7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000200)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 13:42:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 721.852893] EXT4-fs (sda1): Cannot specify journal on remount 13:42:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x608, 0x70bd28, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008066}, 0x7840eaf30e0c38e8) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40000) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 721.953271] audit: type=1804 audit(1574516551.811:150): pid=18629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/431/bus" dev="sda1" ino=17229 res=1 13:42:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x7, 0x0, 0x6, 0x0, 0x8001, 0x7d}, 0xb) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0x12, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0xc0010100, &(0x7f0000000300)={0x9, @remote={[], 0x2}}, 0x12) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffe}}, 0xe8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffff9, 0x0, 0x6, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0xffff, 0x0, 0x2, &(0x7f00000005c0)}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x20001000000003, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x200, 0x0) getsockname$unix(r5, &(0x7f0000000200)=@abs, &(0x7f0000000340)=0x6e) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000003c0)={r7, r8/1000+10000}, 0x10) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, 0x0) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x0, 0x0, 0x5, 0x3, 0x0, 0x9, 0x100, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda22, 0x0, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x0, 0x0, 0x0, 0x7f, 0x1f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) write(r4, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) 13:42:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 722.109659] audit: type=1804 audit(1574516551.821:151): pid=18625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir840900444/syzkaller.j544Lu/1/bus" dev="sda1" ino=17218 res=1 13:42:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)=""/177, 0x3d2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x0, 0x7f, 0xff, 0x401}, {0x9, 0x9, 0x8, 0x1}, {0x44, 0xf2, 0x40, 0x3}, {0x983c, 0x6, 0x0, 0x8001}, {0x3, 0x5, 0x0, 0x5}, {0x0, 0xe9, 0x9, 0xfffff1fa}]}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x40, 0x8) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000240)={0x401, 0x4}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 722.213369] audit: type=1804 audit(1574516551.851:152): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/472/bus" dev="sda1" ino=17228 res=1 [ 722.360622] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 13:42:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 722.464430] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 13:42:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x7, 0x0, 0x6, 0x0, 0x8001, 0x7d}, 0xb) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0x12, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0xc0010100, &(0x7f0000000300)={0x9, @remote={[], 0x2}}, 0x12) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffe}}, 0xe8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffff9, 0x0, 0x6, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0xffff, 0x0, 0x2, &(0x7f00000005c0)}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x20001000000003, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x200, 0x0) getsockname$unix(r5, &(0x7f0000000200)=@abs, &(0x7f0000000340)=0x6e) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000003c0)={r7, r8/1000+10000}, 0x10) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, 0x0) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x0, 0x0, 0x5, 0x3, 0x0, 0x9, 0x100, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda22, 0x0, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x0, 0x0, 0x0, 0x7f, 0x1f}, 0x0, 0x10, 0xffffffffffffffff, 0x2) write(r4, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) 13:42:32 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 722.496321] audit: type=1804 audit(1574516552.341:153): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/432/bus" dev="sda1" ino=17222 res=1 13:42:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x100000) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000300)={0x8, 0x0, [{0x2, 0x1, 0x0, 0x0, @msi={0x10d, 0x6, 0x2b}}, {0x2, 0x4, 0x0, 0x0, @sint={0xe3, 0x54}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0x8, 0x4}}, {0x7, 0xd9b59dbaf8dc6f32, 0x0, 0x0, @adapter={0xffffffff, 0x7, 0x100, 0x4106, 0x8}}, {0xaf9, 0x4, 0x0, 0x0, @sint={0x8, 0x81}}, {0xf14b, 0x4, 0x0, 0x0, @irqchip={0x50, 0x1}}, {0x7ff, 0x1, 0x0, 0x0, @sint={0x5f9, 0x3}}, {0x1000, 0x1, 0x0, 0x0, @irqchip={0x1, 0x2}}]}) rt_sigreturn() fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 722.762502] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 13:42:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x824d5fcc007c7cea, r1, 0xd15, 0x0, 0xfffffffd, {{}, 0x0, 0x6, 0x0, {0x1}}}, 0x172}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 722.917028] audit: type=1804 audit(1574516552.781:154): pid=18675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir840900444/syzkaller.j544Lu/2/bus" dev="sda1" ino=16690 res=1 13:42:32 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x2000000000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000080}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x9c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x1933d54daea81f32}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb79e}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r7, 0x36) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0xff34) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) getpid() r8 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) umount2(&(0x7f0000000140)='./file0\x00', 0x1) timer_create(0x0, 0x0, &(0x7f0000000480)) socket$inet6(0xa, 0x0, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) setsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000040)=0x60, 0x4) acct(&(0x7f0000000180)='./file0\x00') 13:42:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) clock_settime(0x3, &(0x7f0000000080)) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r3, 0x9) ptrace$cont(0x1f, r4, 0xfffffffffffffffa, 0x0) 13:42:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x3ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={r5, 0x7, &(0x7f0000000240)=[0x1, 0x10, 0xc195, 0xffff, 0x2, 0x5, 0x5], &(0x7f00000002c0)=[0x800, 0x8], 0x20, 0x1, 0x9, &(0x7f0000000300)=[0xffff], &(0x7f0000000340)=[0x8]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000000)={r5, 0x1}) sendfile(r0, r1, 0x0, 0x10000) [ 723.201741] audit: type=1800 audit(1574516553.061:155): pid=18692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16881 res=0 [ 723.247925] binder: 18689:18691 ioctl c0306201 20000000 returned -14 [ 723.300476] binder: 18689:18693 ioctl c0306201 20000000 returned -14 13:42:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x66, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x31324d59, 0x2, @stepwise={0x9, 0x17, 0x7e0, 0xfffff375, 0x151, 0x80000000}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) creat(0x0, 0x0) [ 723.335437] audit: type=1804 audit(1574516553.101:156): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/473/file0" dev="sda1" ino=16881 res=1 13:42:33 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 724.230148] net_ratelimit: 18 callbacks suppressed [ 724.230154] protocol 88fb is buggy, dev hsr_slave_0 [ 724.240277] protocol 88fb is buggy, dev hsr_slave_1 [ 724.470798] protocol 88fb is buggy, dev hsr_slave_0 [ 724.476450] protocol 88fb is buggy, dev hsr_slave_1 [ 724.870409] protocol 88fb is buggy, dev hsr_slave_0 [ 724.875571] protocol 88fb is buggy, dev hsr_slave_1 [ 724.954878] protocol 88fb is buggy, dev hsr_slave_0 [ 724.960544] protocol 88fb is buggy, dev hsr_slave_1 [ 725.178783] audit: type=1800 audit(1574516555.041:157): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=17222 res=0 13:42:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x5}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = geteuid() lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0x73f, 0x1}, {0x1ff, 0xffffffff}], r3}, 0x18, 0x0) fcntl$setown(r2, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r4 = creat(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000005b40), 0x400000000000122, 0x0) accept(r7, 0x0, &(0x7f0000000380)) r8 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xebb1, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x80, @empty, 0x8}, {0xa, 0x4e24, 0x5, @empty, 0x10000}, r6, 0x8}}, 0x48) [ 725.280449] protocol 88fb is buggy, dev hsr_slave_0 [ 725.285886] protocol 88fb is buggy, dev hsr_slave_1 13:42:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:35 executing program 1: prlimit64(0x0, 0xc, &(0x7f0000000280)={0x45, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = getpid() sched_setattr(r3, 0x0, 0x0) waitid(0x0, r3, &(0x7f0000000440), 0x20000000, &(0x7f0000000340)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x16) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000100)={0x30, 0x3, 0x1, 0x101, 0x3, 0x20000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x0) sched_rr_get_interval(r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x0, &(0x7f0000000940)=0x7b) read$char_usb(r6, &(0x7f00000003c0)=""/100, 0x64) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c0045006, &(0x7f0000000940)=0x7b) read$char_usb(r7, &(0x7f00000003c0)=""/100, 0x64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000400)={0x8, 0x0, 0x1, 0x9}) 13:42:35 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 725.620562] audit: type=1804 audit(1574516555.481:158): pid=18719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/433/bus" dev="sda1" ino=17025 res=1 13:42:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000400)=0x1000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x10000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000008c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) 13:42:36 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 13:42:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) 13:42:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) uselib(&(0x7f0000000000)='./bus\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x27, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) getpgid(0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000a4f000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000680)=""/213) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000540)=""/4096) tkill(0x0, 0x16) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0xee6) creat(0x0, 0x0) 13:42:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) 13:42:36 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mq_open(&(0x7f0000000140)='-em0keyringself.\xf2/]selinux+\x00', 0x40, 0x1, &(0x7f0000000240)={0x4, 0xd237, 0xffff, 0x5, 0x716, 0x7, 0xff, 0x8}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0xafd8cb02ef55884d) r3 = socket$inet(0x2, 0x3, 0x29) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast2, 0x4e20, 0xa8, 0x4e23, 0xb15e, 0x2, 0x80, 0xe0, 0x2e, 0x0, r5}, {0x7, 0x0, 0x100, 0x24, 0x0, 0x9, 0xfff, 0xffffffffffffff01}, {0x1, 0x6, 0x100000001, 0x3}, 0x7, 0x17, 0x3, 0x0, 0xebcc962a17e8846b, 0x3}, {{@in6=@loopback, 0x4d3, 0x19}, 0x2, @in=@local, 0x0, 0x3, 0xd528b36d875ea29d, 0x6, 0x9, 0x7}}, 0xe8) fallocate(r4, 0x0, 0x0, 0x8020001) getsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000040), &(0x7f00000000c0)=0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 726.605417] audit: type=1804 audit(1574516556.471:159): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir840900444/syzkaller.j544Lu/3/bus" dev="sda1" ino=17137 res=1 13:42:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$rose(r0, 0x104, 0x4, 0x0, 0x0) [ 728.890066] audit: type=1804 audit(1574516558.751:160): pid=18779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/434/bus" dev="sda1" ino=16977 res=1 [ 729.316817] audit: type=1800 audit(1574516559.181:161): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="bus" dev="sda1" ino=17137 res=0 13:42:39 executing program 0: 13:42:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0x80003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$evdev(r1, &(0x7f0000000540)=[{{0x0, 0x7530}, 0x5, 0xfff, 0x2}, {{0x77359400}, 0x2, 0x7, 0x8}, {{}, 0x15, 0xfffd, 0x800}, {{0x77359400}, 0x0, 0x0, 0x40}, {{}, 0x17, 0x5, 0x4}, {{0x0, 0x2710}, 0x15, 0x9, 0x8000}, {{0x0, 0x2710}, 0x5, 0x6, 0x20}, {{}, 0x17, 0x4, 0x1}], 0xc0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020001) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000140)={"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"}) sendfile(r4, r0, 0x0, 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 13:42:39 executing program 3 (fault-call:1 fault-nth:0): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13:42:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) clock_gettime(0x89b3f92052442b0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x78e, 0x6000000001000000, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632f77fbac141414e9", 0x0, 0x100, 0x6000000000000000, 0x0, 0xffde, &(0x7f0000000300)}, 0x28) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) [ 729.430127] net_ratelimit: 18 callbacks suppressed [ 729.430133] protocol 88fb is buggy, dev hsr_slave_0 [ 729.443194] protocol 88fb is buggy, dev hsr_slave_1 [ 729.501218] FAULT_INJECTION: forcing a failure. [ 729.501218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:42:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 729.610775] CPU: 0 PID: 18786 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 729.618743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.628114] Call Trace: [ 729.630977] dump_stack+0x142/0x197 [ 729.635155] should_fail.cold+0x10f/0x159 [ 729.639330] ? __might_sleep+0x93/0xb0 [ 729.643237] __alloc_pages_nodemask+0x1d6/0x7a0 [ 729.647920] ? __alloc_pages_slowpath+0x2930/0x2930 [ 729.652966] alloc_pages_current+0xec/0x1e0 [ 729.657307] pipe_write+0x942/0xe40 [ 729.660957] __vfs_write+0x4a7/0x6b0 [ 729.664681] ? selinux_file_open+0x420/0x420 [ 729.669103] ? kernel_read+0x120/0x120 [ 729.673017] ? rw_verify_area+0xea/0x2b0 [ 729.677098] vfs_write+0x198/0x500 [ 729.680687] SyS_write+0xfd/0x230 [ 729.684161] ? SyS_read+0x230/0x230 [ 729.687791] ? do_syscall_64+0x53/0x640 [ 729.691770] ? SyS_read+0x230/0x230 [ 729.695404] do_syscall_64+0x1e8/0x640 [ 729.699907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 729.704768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 729.710223] RIP: 0033:0x45a639 [ 729.713417] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.721138] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 729.728435] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 729.735716] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 729.742999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 729.750280] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:39 executing program 0: 13:42:39 executing program 1: 13:42:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100), 0x4) 13:42:39 executing program 0: [ 730.470129] protocol 88fb is buggy, dev hsr_slave_0 [ 730.475232] protocol 88fb is buggy, dev hsr_slave_1 [ 730.710139] protocol 88fb is buggy, dev hsr_slave_0 [ 730.715277] protocol 88fb is buggy, dev hsr_slave_1 13:42:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:40 executing program 0: 13:42:40 executing program 1: 13:42:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) getpid() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:40 executing program 3 (fault-call:1 fault-nth:1): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:40 executing program 5: clone(0x2000922100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd80ea"], 0xc}}, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d5cfb8039fb396665b2e21d272ed08895b87c7c8c9f95bd35db034f791"], 0x0, 0x1d}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x16) 13:42:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:42:40 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 730.894749] FAULT_INJECTION: forcing a failure. [ 730.894749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.956638] ptrace attach of "/root/syz-executor.5"[18820] was attempted by "/root/syz-executor.5"[18830] [ 730.958232] CPU: 0 PID: 18819 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 730.974469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.983832] Call Trace: [ 730.986885] dump_stack+0x142/0x197 [ 730.990531] should_fail.cold+0x10f/0x159 [ 730.994684] ? __might_sleep+0x93/0xb0 [ 730.998569] __alloc_pages_nodemask+0x1d6/0x7a0 [ 731.003234] ? __alloc_pages_slowpath+0x2930/0x2930 [ 731.008250] alloc_pages_current+0xec/0x1e0 [ 731.012566] pipe_write+0x942/0xe40 [ 731.016184] __vfs_write+0x4a7/0x6b0 [ 731.019881] ? selinux_file_open+0x420/0x420 [ 731.024274] ? kernel_read+0x120/0x120 [ 731.028172] ? rw_verify_area+0xea/0x2b0 [ 731.032217] vfs_write+0x198/0x500 [ 731.035743] SyS_write+0xfd/0x230 [ 731.039187] ? SyS_read+0x230/0x230 [ 731.042810] ? do_syscall_64+0x53/0x640 [ 731.046766] ? SyS_read+0x230/0x230 [ 731.050379] do_syscall_64+0x1e8/0x640 [ 731.054246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 731.059080] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 731.064261] RIP: 0033:0x45a639 [ 731.067431] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 731.075125] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 731.082378] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 731.089642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 731.096895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 13:42:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xb8dc, &(0x7f00000000c0)={0x3fc00}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:41 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ustat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:42:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x11, 0x2, 0x80, &(0x7f0000000040)) [ 731.104322] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 [ 731.120236] protocol 88fb is buggy, dev hsr_slave_0 [ 731.125384] protocol 88fb is buggy, dev hsr_slave_1 [ 731.158952] audit: type=1804 audit(1574516561.021:162): pid=18825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/" dev="sda1" ino=2328 res=1 [ 731.190130] protocol 88fb is buggy, dev hsr_slave_0 [ 731.195281] protocol 88fb is buggy, dev hsr_slave_1 13:42:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 731.257708] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns [ 731.684612] audit: type=1804 audit(1574516561.551:163): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/435/bus" dev="sda1" ino=16977 res=1 [ 732.010008] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 13:42:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x1000000, 0x3, 0x52, 0xfffffffffffffffb, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6a002, 0x0) sendto$inet6(r4, &(0x7f00000009c0), 0x3e5, 0xc001, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8100c1, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x2000000000fff9) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 13:42:42 executing program 3 (fault-call:1 fault-nth:2): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() setgid(r8) r9 = getegid() setgid(r9) r10 = getegid() setgid(r10) r11 = getegid() setgid(r11) r12 = getgid() r13 = getgid() r14 = getegid() setgid(r14) r15 = getegid() setgid(r15) r16 = getegid() setgid(r16) r17 = getegid() setgid(r17) r18 = getegid() setgid(r18) getgroups(0x7, &(0x7f0000000180)=[r14, r15, 0xee00, r16, r17, 0xee01, r18]) r20 = getegid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0xaf0235b321533ef4, r4}, {0x2, 0x3, r6}], {0x4, 0x5}, [{0x8, 0x6, r7}, {0x8, 0xe, r8}, {0x8, 0xbe21ff1e95cea027, r9}, {0x8, 0x2, r10}, {0x8, 0x3, r11}, {0x8, 0x2, r12}, {0x8, 0x1, r13}, {0x8, 0x4, r19}, {0x8, 0x0, r20}, {0x8, 0x4, r21}], {0x10, 0x8}, {0x20, 0x2}}, 0x84, 0x1) 13:42:42 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x84000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=""/180, &(0x7f0000000180)=[{0x1, 0x43, 0x1, &(0x7f0000000100)=""/67}]}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x228900, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = socket$isdn(0x22, 0x3, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000240)={0x3, 0x2}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x8040, 0x0) syz_open_pts(r3, 0xc2990358dab0dddd) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x100000000, 0x14}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000340)={0x3ff, 0x1, [0x8000, 0x1, 0x7, 0x1, 0x1], 0xe1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000380)) r5 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\\\x00', 0xfffffffffffffffe) keyctl$link(0x8, r5, r6) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000580), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/186, 0xba}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000900)=""/116, 0x74}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x6, &(0x7f0000001a00)=""/197, 0xc5}, 0x3a}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/211, 0xd3}], 0x1}, 0x62db}], 0x2, 0x80012001, 0x0) write$binfmt_elf32(r8, &(0x7f0000001d40)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x6, 0xaa, 0x2, 0x1, 0x2, 0x6, 0x0, 0x2c1, 0x38, 0x12c, 0x40, 0x1ff, 0x20, 0x2, 0x8, 0x1, 0xfff}, [{0x1, 0x4, 0x7fff, 0x3, 0x200, 0x8, 0x7, 0x4}, {0x2, 0x1b4, 0x0, 0x5, 0x8, 0x0, 0x4, 0x2bc}], "ae9d6fa6a9f06281ce8d48be8595f12609045d8ac551c62f7241b709163112ee6de0abbecd24fcb1bb0979b5a7e121205d6e598f5e63a35f2efed82bb1f6164e224015195947e62fc40f862c12be47d0dfbbf1cb34cfafb299201c07959391fd80097515abe78756ac08307cc1865533dca1322537fd1cc199d48a6a754cc0ae838279b81eb89f8ab8c1c98241e710e9a1b1c04e037ee8436d741dffea18bc918deccada5c39c5acee01f16e540ead34ef3a3e2f2eefa15a7dfba9ed890b34844e3d4d278167e8cf7239c05aabf1c8c6b8981d6db3c481de386d619fcee843395f26f58c61853d1c9aae9c721e", [[], []]}, 0x365) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f00000020c0)={0x200, 0x2, 0x5}) r9 = openat(r7, &(0x7f0000002100)='./file0\x00', 0x4000, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r9, 0xc0286415, &(0x7f0000002140)={&(0x7f0000ffd000/0x2000)=nil, 0x93c, 0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000002180)) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f00000021c0)={0x10}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, 0x2b, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002300)='bridge0\x00', 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x7, 0x76003) 13:42:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 732.826499] hfsplus: invalid uid specified [ 732.836921] FAULT_INJECTION: forcing a failure. [ 732.836921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 732.850416] hfsplus: unable to parse mount options [ 732.888259] CPU: 0 PID: 18878 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 732.896193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.896206] Call Trace: [ 732.908348] dump_stack+0x142/0x197 [ 732.912024] should_fail.cold+0x10f/0x159 [ 732.916173] ? __might_sleep+0x93/0xb0 [ 732.920058] __alloc_pages_nodemask+0x1d6/0x7a0 [ 732.924826] ? __alloc_pages_slowpath+0x2930/0x2930 [ 732.930033] alloc_pages_current+0xec/0x1e0 [ 732.934395] pipe_write+0x942/0xe40 [ 732.934418] __vfs_write+0x4a7/0x6b0 [ 732.934432] ? selinux_file_open+0x420/0x420 [ 732.946164] ? kernel_read+0x120/0x120 [ 732.950336] ? rw_verify_area+0xea/0x2b0 [ 732.954439] vfs_write+0x198/0x500 [ 732.958047] SyS_write+0xfd/0x230 [ 732.961573] ? SyS_read+0x230/0x230 [ 732.965235] ? do_syscall_64+0x53/0x640 [ 732.969240] ? SyS_read+0x230/0x230 [ 732.972902] do_syscall_64+0x1e8/0x640 [ 732.976805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.981672] entry_SYSCALL_64_after_hwframe+0x42/0xb7 13:42:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 732.986981] RIP: 0033:0x45a639 [ 732.990181] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.997907] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 733.005194] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 733.012656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 733.020206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 733.027576] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) getrusage(0xfffffffffffffffe, &(0x7f00000000c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x3, 0xfffffffffffffe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0xdf}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/107) sched_setattr(r4, &(0x7f0000000080)={0xffffff60, 0x2, 0x1, 0x8001, 0x3}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000800), &(0x7f0000000840)=0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4800) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r5, 0x800000c0045002, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) r7 = socket(0x0, 0x80000, 0x6) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000380)={r9, @in6={{0xa, 0x4e22, 0x10001, @empty, 0x7}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480)={r10, 0x8}, 0x8) openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x8000, 0x0) 13:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = creat(0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000002320000000c0000"], 0x20}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000200)=0x1) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0xfff, 0x8001, 0xf66, 'queue0\x00', 0x2}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x2000000000, 0xaaaab9b, &(0x7f0000000200), 0x0, 0x0) 13:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:43 executing program 3 (fault-call:1 fault-nth:3): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x1000000, 0x3, 0x52, 0xfffffffffffffffb, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6a002, 0x0) sendto$inet6(r4, &(0x7f00000009c0), 0x3e5, 0xc001, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8100c1, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x2000000000fff9) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 733.747271] FAULT_INJECTION: forcing a failure. [ 733.747271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:42:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 733.790089] audit: type=1804 audit(1574516563.651:164): pid=18916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/132/bus" dev="sda1" ino=17283 res=1 [ 733.832716] CPU: 1 PID: 18924 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 733.840661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.850022] Call Trace: [ 733.852620] dump_stack+0x142/0x197 [ 733.856264] should_fail.cold+0x10f/0x159 [ 733.860439] ? __might_sleep+0x93/0xb0 [ 733.864343] __alloc_pages_nodemask+0x1d6/0x7a0 [ 733.869027] ? __alloc_pages_slowpath+0x2930/0x2930 [ 733.874071] alloc_pages_current+0xec/0x1e0 [ 733.878424] pipe_write+0x942/0xe40 [ 733.882765] __vfs_write+0x4a7/0x6b0 [ 733.886542] ? selinux_file_open+0x420/0x420 [ 733.890973] ? kernel_read+0x120/0x120 [ 733.894891] ? rw_verify_area+0xea/0x2b0 [ 733.899152] vfs_write+0x198/0x500 [ 733.902711] SyS_write+0xfd/0x230 [ 733.906177] ? SyS_read+0x230/0x230 [ 733.909806] ? do_syscall_64+0x53/0x640 [ 733.909819] ? SyS_read+0x230/0x230 [ 733.909833] do_syscall_64+0x1e8/0x640 [ 733.909843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.909862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 733.909871] RIP: 0033:0x45a639 [ 733.935437] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.943163] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 733.950462] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 733.957741] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 733.965009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 733.965016] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x1000000, 0x3, 0x52, 0xfffffffffffffffb, 0x40}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6a002, 0x0) sendto$inet6(r4, &(0x7f00000009c0), 0x3e5, 0xc001, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8100c1, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x2000000000fff9) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 13:42:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 734.630147] net_ratelimit: 12 callbacks suppressed [ 734.630153] protocol 88fb is buggy, dev hsr_slave_0 [ 734.640298] protocol 88fb is buggy, dev hsr_slave_1 [ 734.870135] protocol 88fb is buggy, dev hsr_slave_0 [ 734.875249] protocol 88fb is buggy, dev hsr_slave_1 [ 735.270160] protocol 88fb is buggy, dev hsr_slave_0 [ 735.275342] protocol 88fb is buggy, dev hsr_slave_1 [ 735.350409] protocol 88fb is buggy, dev hsr_slave_0 [ 735.355638] protocol 88fb is buggy, dev hsr_slave_1 [ 735.670151] protocol 88fb is buggy, dev hsr_slave_0 [ 735.675320] protocol 88fb is buggy, dev hsr_slave_1 13:42:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:45 executing program 3 (fault-call:1 fault-nth:4): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 735.860111] FAULT_INJECTION: forcing a failure. [ 735.860111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:42:45 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x18475140f06794e8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/policy\x00', 0x0, 0x0) times(0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000f40)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) [ 735.904774] CPU: 1 PID: 18975 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 735.912723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.922115] Call Trace: [ 735.924817] dump_stack+0x142/0x197 [ 735.928476] should_fail.cold+0x10f/0x159 [ 735.932637] ? __might_sleep+0x93/0xb0 [ 735.936548] __alloc_pages_nodemask+0x1d6/0x7a0 [ 735.941338] ? __alloc_pages_slowpath+0x2930/0x2930 [ 735.946384] alloc_pages_current+0xec/0x1e0 [ 735.950735] pipe_write+0x942/0xe40 [ 735.954415] __vfs_write+0x4a7/0x6b0 [ 735.958148] ? selinux_file_open+0x420/0x420 [ 735.962580] ? kernel_read+0x120/0x120 [ 735.966508] ? rw_verify_area+0xea/0x2b0 [ 735.970667] vfs_write+0x198/0x500 [ 735.974220] SyS_write+0xfd/0x230 [ 735.977687] ? SyS_read+0x230/0x230 [ 735.981321] ? do_syscall_64+0x53/0x640 [ 735.985307] ? SyS_read+0x230/0x230 [ 735.988966] do_syscall_64+0x1e8/0x640 [ 735.992865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.997720] entry_SYSCALL_64_after_hwframe+0x42/0xb7 13:42:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 736.002917] RIP: 0033:0x45a639 [ 736.006107] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.009777] audit: type=1804 audit(1574516565.771:165): pid=18983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir840900444/syzkaller.j544Lu/12/file0" dev="sda1" ino=17297 res=1 [ 736.013814] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 736.013820] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 736.013825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 736.013830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 736.013835] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:46 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 736.466376] audit: type=1804 audit(1574516566.331:166): pid=19006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/439/bus" dev="sda1" ino=17298 res=1 [ 737.001873] audit: type=1804 audit(1574516566.871:167): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/133/bus" dev="sda1" ino=17288 res=1 13:42:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:48 executing program 3 (fault-call:1 fault-nth:5): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:48 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x77359400}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x20002200b, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xfffe}, r0, 0x2000000007, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) socket(0x11, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @local}, &(0x7f0000000540)=0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r6, &(0x7f00000015c0)={0x8, "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", 0xfffffffffffffde9}, 0x10000005c) fadvise64(r6, 0x0, 0x0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, &(0x7f0000000680)) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x40, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) r10 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x0, &(0x7f0000000340)=0x811, 0xffffffffffffff30) sendfile(r9, r8, &(0x7f0000000000), 0x1) r11 = socket$unix(0x1, 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) r13 = dup2(r12, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x1ff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, r14, 0x0, 0x2}, 0x2, 0x0, 0x8}) syz_open_dev$vcsn(0x0, 0x3f, 0x0) 13:42:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 738.798982] FAULT_INJECTION: forcing a failure. [ 738.798982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.841924] CPU: 0 PID: 19035 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 738.849855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.859204] Call Trace: [ 738.861789] dump_stack+0x142/0x197 [ 738.865426] should_fail.cold+0x10f/0x159 [ 738.869705] ? __might_sleep+0x93/0xb0 [ 738.873591] __alloc_pages_nodemask+0x1d6/0x7a0 [ 738.879206] ? __alloc_pages_slowpath+0x2930/0x2930 [ 738.884216] alloc_pages_current+0xec/0x1e0 [ 738.888525] pipe_write+0x942/0xe40 [ 738.892148] __vfs_write+0x4a7/0x6b0 [ 738.895846] ? selinux_file_open+0x420/0x420 [ 738.900240] ? kernel_read+0x120/0x120 [ 738.904131] ? rw_verify_area+0xea/0x2b0 [ 738.908177] vfs_write+0x198/0x500 [ 738.911701] SyS_write+0xfd/0x230 [ 738.915143] ? SyS_read+0x230/0x230 [ 738.918755] ? do_syscall_64+0x53/0x640 [ 738.923253] ? SyS_read+0x230/0x230 [ 738.926865] do_syscall_64+0x1e8/0x640 [ 738.930736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 738.935567] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 738.940738] RIP: 0033:0x45a639 [ 738.943908] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 738.951600] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 738.958853] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 738.966104] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 738.973358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 738.980609] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:49 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:49 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x400000000000122, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@ipx, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000440)=""/241, 0xf1}], 0x5, &(0x7f00000005c0)=""/160, 0xa0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253efc1c8b63edad3c020f5027972060e8ac2a8b6001fd635da8bbdf3c158d110d784a764df43a90ed98d1a67c661", 0x66, 0x400}], 0x0, &(0x7f0000000140)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 13:42:49 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00e68e03eabd0c6e49842e1ce2a071066d4d301bc9e04557246528a4c193bd408fd3080fab9add1d5b7ce9ac7e6bd614bf6b281b62c2f5492834a737c687e01cce26fdb9b716cd244a5fe3f435004f6441e3ce17eb9dd14a4cfa68d05d79"], 0x2) fallocate(r1, 0x3, 0x0, 0x8020003) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x3, 0x80000001, 0x9e47, 0x1], 0x4, 0x7, 0x1d75, 0x1ff, 0x1, 0x7, {0x7, 0x6, 0xb0, 0xffff, 0x7d29, 0x8, 0xbde, 0x9bf, 0xc57e, 0x1000, 0x3f, 0x732, 0xe66, 0x7fff, "5cd87fb48c2e0e0a8ee568843f9accd811924121f3c34b4ea7e6bff687985d74"}}) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x81, 0x5) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r5, 0x80000001}, 0x8) [ 739.257754] audit: type=1804 audit(1574516569.121:168): pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/440/bus" dev="sda1" ino=17312 res=1 13:42:49 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 739.339012] binder: 19061:19063 ioctl c0306201 20000000 returned -14 13:42:49 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 739.434370] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 739.453914] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (671a0809) 13:42:49 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 739.830130] net_ratelimit: 18 callbacks suppressed [ 739.830136] protocol 88fb is buggy, dev hsr_slave_0 [ 739.840227] protocol 88fb is buggy, dev hsr_slave_1 [ 740.059563] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 740.076322] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (671a0809) [ 740.100524] binder: 19061:19069 ioctl c0306201 20000000 returned -14 [ 740.198998] audit: type=1804 audit(1574516570.061:169): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/134/bus" dev="sda1" ino=17283 res=1 [ 740.880140] protocol 88fb is buggy, dev hsr_slave_0 [ 740.885298] protocol 88fb is buggy, dev hsr_slave_1 [ 741.110480] protocol 88fb is buggy, dev hsr_slave_0 [ 741.115983] protocol 88fb is buggy, dev hsr_slave_1 [ 741.510339] protocol 88fb is buggy, dev hsr_slave_0 [ 741.515735] protocol 88fb is buggy, dev hsr_slave_1 [ 741.600161] protocol 88fb is buggy, dev hsr_slave_0 [ 741.605336] protocol 88fb is buggy, dev hsr_slave_1 [ 742.876784] audit: type=1800 audit(1574516572.741:170): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=17283 res=0 13:42:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:52 executing program 3 (fault-call:1 fault-nth:6): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:52 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x106) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x170000, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffff07, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x40}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @dev={[], 0x12}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@ipmr_newroute={0xe0, 0x18, 0x4, 0x70bd29, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x1f, 0xfe, 0x3, 0xff, 0x8, 0x1400}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x7f, 0x7, r1}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1f, 0x40, r6}}, @RTA_ENCAP={0xa4, 0x16, @typed={0xa0, 0x64, @binary="3cc2cfbb47c7b97f5b41eda5670c71ec8bd609427eaf4571ff05e7ffd6544dac37ccb5d0d539cccd9364917ceb78b6d37241431bb4088d890db2d9436414e7ff526773985e5e25fbbba8111ffc8f45aa9031844e48102b10d8c2998216d81cf55e2e697934696a6e8cb6378ca6dd2ac3a300b0d2fc1b29f5a331c81e1ab910d1f0b0a72ef51e18b7ed57cefaf4a11d7b58f3e6e8bcb3cbecf1ffccd3"}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0xe0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000540)={"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"}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x68, 0x29, 0x0, {0x2, [{{0xf5271d7abeb7ed10, 0x2, 0x6}, 0x0, 0x3, 0x7, './file0'}, {{0x49, 0x0, 0x6}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x68) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000003c0)={'lapb0\x00', {0x2, 0x4e24, @loopback}}) dup3(0xffffffffffffffff, r7, 0x0) sched_yield() r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x2000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:42:52 executing program 1: r0 = dup(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="9062f9b0a60633e7fda00e6102a4afa91afc1b1f14ae1a678b31e416fdb5bf52df6766a10b31214a9056d3ad71ac717b4e7f47fe449f4f122f26b286f5f2f33a99683aa826d265da6132f03adb8b74c7d5945310343d95eaeef6568ec5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0xff}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0xbb) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r6, r8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4000, 0x0) dup2(r10, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r11 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r11, &(0x7f00000001c0)={0x10000000c}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'rose0\x00', 0x201}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'rose0\x00\x00\x00\x00\x00\x02\x00\f\xa9\x00'}) 13:42:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 742.997886] FAULT_INJECTION: forcing a failure. [ 742.997886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.050470] CPU: 1 PID: 19104 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 743.058423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.067801] Call Trace: [ 743.070413] dump_stack+0x142/0x197 [ 743.074677] should_fail.cold+0x10f/0x159 [ 743.074699] ? __might_sleep+0x93/0xb0 [ 743.082781] __alloc_pages_nodemask+0x1d6/0x7a0 [ 743.087493] ? __alloc_pages_slowpath+0x2930/0x2930 [ 743.092553] alloc_pages_current+0xec/0x1e0 [ 743.096889] pipe_write+0x942/0xe40 13:42:53 executing program 1: socket$isdn(0x22, 0x3, 0x25) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0xfffffffffffffdb8) r0 = open(0x0, 0x100, 0x81) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0xb2, &(0x7f0000000200)="c1020e6a6b2177ed3674fe0a486791a54531c880fed08cddb3f8240434a672f58465b97c08d4894378eacc107e13a324cb9f00910b021a343e19736b7325747acbf4ca0172adf23c84ad9208c2ba86560bb38229b6d0099d0243d8f9577dfa66a98a04fa77d9d086a4e03a96f4053cc58ef978dd3730c4297546d9cd57be275e9e1089f9074645257dc1c2fd94eee739be6c2d98f085fd5a91c854347d3417c054ab5d57e7a40444b826a3eec9783d6fab8b", 0xbc, 0x0, &(0x7f00000002c0)="c902ebc26f1961998460c435bab08ac768eb08d4fd78274ed7937022d5ae158f83ce59f923abc9b073243b1d581de7e4686aef9cdf3fe504ce4bb0ff3bca0cba264da926bf17ae2f4d5ff3d51a24c295bcb13943b61c5c82a9d8b836b93d2ce8ede6bc394690111501d77edaacf21b7d9dbfed6d16f2d5aa3bda59f324731a7fac83335d7506eb242c2d0bb0fc84168fc0c16d13a57f1576a546bf0b21c878731f1f6e8b04f5904c610999863266081ea8c444366b7d811f29e3d4c8"}) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @bcast, @bpq0='bpq0\x00', 0x40, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x1, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 743.100546] __vfs_write+0x4a7/0x6b0 [ 743.104270] ? selinux_file_open+0x420/0x420 [ 743.108693] ? kernel_read+0x120/0x120 [ 743.112608] ? rw_verify_area+0xea/0x2b0 [ 743.116682] vfs_write+0x198/0x500 [ 743.120235] SyS_write+0xfd/0x230 [ 743.123702] ? SyS_read+0x230/0x230 [ 743.123715] ? do_syscall_64+0x53/0x640 [ 743.123726] ? SyS_read+0x230/0x230 [ 743.131311] do_syscall_64+0x1e8/0x640 [ 743.131321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.131339] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.131346] RIP: 0033:0x45a639 [ 743.131351] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.131362] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 743.131368] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 743.131373] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 743.131378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 743.131383] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 13:42:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 743.248463] audit: type=1804 audit(1574516573.111:171): pid=19111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/441/bus" dev="sda1" ino=17327 res=1 13:42:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) [ 743.464490] audit: type=1804 audit(1574516573.331:172): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/135/bus" dev="sda1" ino=17333 res=1 13:42:53 executing program 3 (fault-call:1 fault-nth:7): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) [ 743.717586] FAULT_INJECTION: forcing a failure. [ 743.717586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.732870] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.741454] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.773338] CPU: 0 PID: 19137 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 743.781289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.790666] Call Trace: [ 743.793280] dump_stack+0x142/0x197 [ 743.797036] should_fail.cold+0x10f/0x159 [ 743.801197] ? __might_sleep+0x93/0xb0 [ 743.805091] __alloc_pages_nodemask+0x1d6/0x7a0 [ 743.809838] ? __alloc_pages_slowpath+0x2930/0x2930 [ 743.814859] alloc_pages_current+0xec/0x1e0 [ 743.819257] pipe_write+0x942/0xe40 [ 743.822889] __vfs_write+0x4a7/0x6b0 [ 743.826605] ? selinux_file_open+0x420/0x420 [ 743.831548] ? kernel_read+0x120/0x120 [ 743.835431] ? rw_verify_area+0xea/0x2b0 [ 743.839913] vfs_write+0x198/0x500 [ 743.843440] SyS_write+0xfd/0x230 [ 743.846890] ? SyS_read+0x230/0x230 [ 743.850607] ? do_syscall_64+0x53/0x640 [ 743.854580] ? SyS_read+0x230/0x230 [ 743.858370] do_syscall_64+0x1e8/0x640 [ 743.862357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.867303] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.872481] RIP: 0033:0x45a639 [ 743.875747] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.883441] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 743.890721] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 743.897977] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 743.905349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 743.912609] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 [ 745.030673] net_ratelimit: 12 callbacks suppressed [ 745.030712] protocol 88fb is buggy, dev hsr_slave_0 [ 745.041317] protocol 88fb is buggy, dev hsr_slave_1 [ 745.280136] protocol 88fb is buggy, dev hsr_slave_0 [ 745.285383] protocol 88fb is buggy, dev hsr_slave_1 [ 745.750787] protocol 88fb is buggy, dev hsr_slave_0 [ 745.756425] protocol 88fb is buggy, dev hsr_slave_1 [ 746.070192] protocol 88fb is buggy, dev hsr_slave_0 [ 746.075354] protocol 88fb is buggy, dev hsr_slave_1 13:42:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 13:42:56 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) syz_emit_ethernet(0x76, &(0x7f0000000200)={@broadcast=[0xff, 0x11], @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "763f11", 0x40, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "008000", 0x0, 0x0, 0x0, @mcast1, @mcast1, [@srh={0x29}], "abc91f731d52a2a7"}}}}}}}, 0x0) 13:42:56 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002b00050ad25a80648c6356c11224fc0010000b400400040005", 0x1d}], 0x1}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100000, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x16) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = getegid() setgid(r2) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x16) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x16) ptrace$cont(0x20, 0x0, 0x0, 0x4) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) r10 = getegid() setgid(r10) r11 = socket$unix(0x1, 0x2, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/user\x00') r13 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r13, 0x0, 0x0, 0x8020001) r14 = accept4$rose(r13, &(0x7f0000000a80)=@short={0xb, @remote, @default, 0x1, @netrom}, &(0x7f0000000ac0)=0x1c, 0x80800) r15 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_dev$sndpcmp(&(0x7f0000000b00)='/dev/snd/pcmC#D#p\x00', 0x69, 0x2) r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000b40)='/selinux/enforce\x00', 0x200, 0x0) r18 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r19 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/rtc0\x00', 0x400000, 0x0) r20 = gettid() ptrace$setopts(0x4206, r20, 0x0, 0x0) tkill(r20, 0x16) ptrace$cont(0x18, r20, 0x0, 0x0) ptrace$setregs(0xd, r20, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r20, 0x0, 0x0) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r22) r23 = getpid() r24 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r25) r26 = getegid() setgid(r26) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000bc0)='syzkaller\x00', r27}, 0x30) r29 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r30) r31 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r31, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = socket$pptp(0x18, 0x1, 0x2) r33 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r33, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000d80)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="d07b45d2d23ac32f6c20f8bf621ca81430ce95463861133a25bc195aa6441515dd2232bf4c5d6e1fa083b2319686c6e4e1fb8f092b0e3924a26417bef0368628d36ed34a4549178254ca96a5494d996336393dd35f2e082f11505730fca4fde34df294395acebca741404e6d2bdbd68076533448ddaa5f34319d2f7345cba6ec935708c21a8c339aea0c56e2890f3df8de064fca4eb264d8ab85773c5b6fb228921f6739815983125f46c6822749b25d6f5565c6b4175b09befaedf502860b93175997a22fc0916d1ec8ab1ac3ebc8e7bbebf07e85c42afd05495129ad6f960f4fc3", 0xe2}, {&(0x7f0000000500)="78b5a5d06ae6ffa08965fda46f5ebaf6c56f3dfc41d15027022479fc62e29193c13a69d5fd6944845506e2ca0a3ab2ff6a2a482cc6b1c114969add2bf12341a49049b83f697440fd950d8e524ccdbe25d21938218b45214af71f4b44a63149b9b5d5a20faa39143718855ebc4491a8f95bd99b50adc3b95113fd0c87725795f04713709a00ec376fe1a9cc2ffdf1cf036788e3f4ea660e85da0b24e069284e6ca0401be66ae0e68fa24e50c44b8dc2ff46742080a7459c729b243fd05ce1fcbd6930029898f38e2e3019ed03ec128bad9cd9309692a43c89136edf8b7a06624acba61cca2b0d927417fdb1d9d764b96aa833", 0xf2}, {&(0x7f0000000600)="53af10543829f0557122e48ee3d3c1497fbca72e8fbff3248c76e7304eb8f468c51f33ea559698ca23e40bfd6835edd8d0ede895a50345a9c7a1b052edc590422d4c4ab18b9bc7950ed5272c66d696129a2800a6ecf7cd0ddfa17f70912df95ecf67b1f6fcb75e13cbb5f6320931952bd97aee05cc2390c5aff97cdd45ad8e936d91862bfa56da011663e2bc", 0x8c}], 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r22, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000400000000000800", @ANYRES32=r23, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r28, @ANYRES32=r30, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x4}, 0xbbf6aa570d955523) r34 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x50, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d91f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae13c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0952d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656e84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450fd000000000000004ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb40000000000000000007ebbd063739230f7bbe892a2a4732c58b37cb84e6160fdfa341c7ca293bdec783daaf30e066ba18066d6e23003d1c6db506ba4ebe82b774d1fe7a129"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x2}, 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r34, 0x1800000000000060, 0x9b2, 0x1000000, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffffffffffe94, 0x3e0, &(0x7f0000000000), &(0x7f0000000140)}, 0x28) r35 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r35, 0x12, 0x2, &(0x7f0000000140)=""/162, &(0x7f0000000080)=0xa2) inotify_init() syz_open_dev$midi(0x0, 0x0, 0x0) 13:42:56 executing program 3 (fault-call:1 fault-nth:8): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 746.217416] audit: type=1800 audit(1574516576.081:173): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=17333 res=0 13:42:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 746.298746] FAULT_INJECTION: forcing a failure. [ 746.298746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.346731] CPU: 1 PID: 19157 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 746.354682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.364337] Call Trace: [ 746.366981] dump_stack+0x142/0x197 [ 746.370638] should_fail.cold+0x10f/0x159 [ 746.374810] ? __might_sleep+0x93/0xb0 [ 746.378759] __alloc_pages_nodemask+0x1d6/0x7a0 [ 746.383665] ? __alloc_pages_slowpath+0x2930/0x2930 [ 746.388855] alloc_pages_current+0xec/0x1e0 [ 746.393197] pipe_write+0x942/0xe40 13:42:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 746.396848] __vfs_write+0x4a7/0x6b0 [ 746.400575] ? selinux_file_open+0x420/0x420 [ 746.405009] ? kernel_read+0x120/0x120 [ 746.408929] ? rw_verify_area+0xea/0x2b0 [ 746.413015] vfs_write+0x198/0x500 [ 746.416580] SyS_write+0xfd/0x230 [ 746.420059] ? SyS_read+0x230/0x230 [ 746.423787] ? do_syscall_64+0x53/0x640 [ 746.427776] ? SyS_read+0x230/0x230 [ 746.431540] do_syscall_64+0x1e8/0x640 [ 746.435437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 746.440379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 13:42:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 746.440389] RIP: 0033:0x45a639 [ 746.440393] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 746.440406] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 746.440412] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 746.440418] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 746.440424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 746.440433] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 [ 746.498629] audit: type=1804 audit(1574516576.361:174): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/442/bus" dev="sda1" ino=17346 res=1 13:42:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0xfffffffffffffcc4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), 0x8) r1 = socket$inet6(0xa, 0x3, 0x80) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r4 = socket$inet(0x2, 0x3, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x5af, 0x40a00) connect$inet(r5, 0x0, 0xff31) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) write(r3, &(0x7f0000000480)="9fb90531f7", 0x5) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000440)}], 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x5, r8}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003b00)=0x14) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket$inet6(0xa, 0x1, 0x0) 13:42:56 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:56 executing program 3 (fault-call:1 fault-nth:9): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 746.751687] FAULT_INJECTION: forcing a failure. [ 746.751687] name failslab, interval 1, probability 0, space 0, times 0 [ 746.792224] FAULT_INJECTION: forcing a failure. [ 746.792224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.803219] audit: type=1804 audit(1574516576.671:175): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/136/bus" dev="sda1" ino=17341 res=1 [ 746.835000] CPU: 1 PID: 19187 Comm: syz-executor.4 Not tainted 4.14.155-syzkaller #0 [ 746.842932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.852305] Call Trace: [ 746.854911] dump_stack+0x142/0x197 [ 746.858581] should_fail.cold+0x10f/0x159 [ 746.862739] should_failslab+0xdb/0x130 [ 746.866725] kmem_cache_alloc_trace+0x2e9/0x790 [ 746.871464] tcp_sendmsg_locked+0x26ee/0x31c0 [ 746.875979] ? debug_smp_processor_id+0x1c/0x20 [ 746.880665] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 746.885626] ? perf_trace_lock+0x500/0x500 [ 746.890663] ? lock_sock_nested+0x9e/0x110 [ 746.894913] ? tcp_sendpage+0x60/0x60 [ 746.898743] ? trace_hardirqs_on_caller+0x400/0x590 [ 746.903771] ? lock_sock_nested+0x8c/0x110 [ 746.908014] ? trace_hardirqs_on+0xd/0x10 [ 746.912254] ? __local_bh_enable_ip+0x99/0x1a0 [ 746.916850] tcp_sendmsg+0x30/0x50 [ 746.920496] inet_sendmsg+0x122/0x500 [ 746.924314] ? inet_recvmsg+0x500/0x500 [ 746.928301] sock_sendmsg+0xce/0x110 [ 746.932202] SYSC_sendto+0x206/0x310 [ 746.936277] ? SYSC_connect+0x2d0/0x2d0 [ 746.940267] ? lock_downgrade+0x740/0x740 [ 746.944445] ? wait_for_completion+0x420/0x420 [ 746.949037] ? __sb_end_write+0xc1/0x100 [ 746.953118] ? fput+0xd4/0x150 [ 746.956493] ? SyS_write+0x15e/0x230 [ 746.960316] SyS_sendto+0x40/0x50 [ 746.963779] ? SyS_getpeername+0x30/0x30 [ 746.967943] do_syscall_64+0x1e8/0x640 [ 746.971833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 746.976687] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 746.981867] RIP: 0033:0x45a639 [ 746.985060] RSP: 002b:00007fad9eb73c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 746.992776] RAX: ffffffffffffffda RBX: 00007fad9eb73c90 RCX: 000000000045a639 [ 747.000051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 747.007332] RBP: 000000000075bf20 R08: 0000000020e68000 R09: 0000000000000010 [ 747.014612] R10: 00000000200007fd R11: 0000000000000246 R12: 00007fad9eb746d4 [ 747.021891] R13: 00000000004c8dff R14: 00000000004df6d0 R15: 0000000000000004 [ 747.036567] CPU: 0 PID: 19189 Comm: syz-executor.3 Not tainted 4.14.155-syzkaller #0 [ 747.044501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.054392] Call Trace: [ 747.057356] dump_stack+0x142/0x197 [ 747.061373] should_fail.cold+0x10f/0x159 [ 747.065541] ? __might_sleep+0x93/0xb0 [ 747.069452] __alloc_pages_nodemask+0x1d6/0x7a0 [ 747.074145] ? __alloc_pages_slowpath+0x2930/0x2930 [ 747.079197] alloc_pages_current+0xec/0x1e0 [ 747.083563] pipe_write+0x942/0xe40 [ 747.087246] __vfs_write+0x4a7/0x6b0 [ 747.090973] ? selinux_file_open+0x420/0x420 [ 747.095400] ? kernel_read+0x120/0x120 [ 747.099322] ? rw_verify_area+0xea/0x2b0 [ 747.103405] vfs_write+0x198/0x500 [ 747.106971] SyS_write+0xfd/0x230 [ 747.110466] ? SyS_read+0x230/0x230 [ 747.114449] ? do_syscall_64+0x53/0x640 [ 747.118526] ? SyS_read+0x230/0x230 [ 747.122171] do_syscall_64+0x1e8/0x640 [ 747.126070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 747.131030] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 747.136616] RIP: 0033:0x45a639 [ 747.139842] RSP: 002b:00007f816eb62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.147566] RAX: ffffffffffffffda RBX: 00007f816eb62c90 RCX: 000000000045a639 [ 747.154846] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000004 [ 747.162213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 747.169486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb636d4 [ 747.176921] R13: 00000000004c7158 R14: 00000000004e2ac0 R15: 0000000000000005 [ 747.184582] protocol 88fb is buggy, dev hsr_slave_0 [ 747.189695] protocol 88fb is buggy, dev hsr_slave_1 [ 749.267577] audit: type=1800 audit(1574516579.131:176): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=17346 res=0 13:42:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:42:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:42:59 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) sendmmsg$nfc_llcp(r1, &(0x7f0000000300)=[{&(0x7f0000000080)={0x27, 0x2, 0x2, 0x1, 0x6, 0x1f, "36400acf8b5907604711c687b3d4933073ab2aa1b35226a6a24e3438fe199c982c9e8cc541c53622ebeca8738b265e596a61aab5f29cd6eec615138d20a375", 0x2a}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000380)="a0f5f7b9de7fefc8fbca7bfb3cc2ea649bf068f052f408e4ad757968bcc64350cbc06a2e8251cc65b28b0aa80cde618fc70708a82ac0f0e22b1ba2c072af63cdef53d3a8a24b5e10bda5f084d457e3919188cb223274e93151bd5326b945ec9263919f67fd8600439aecfc3a6bddf7848c8de137881dcd1cb55a31ffab317730ab913a6b75cbd4cd52ad0026cecc8d97e544ef0552903b2377ace9470250fd556728ed9a0bddd12a84d2ae371c52dcff9002a57f675ae6541b1482", 0xbb}], 0x1, &(0x7f0000000480)={0x18, 0x4, 0x100, "ad41f6ece9e6f587"}, 0xffffffffffffff34, 0x24004141}], 0x1, 0x1000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)="fddb891fc1fcfad9e35ceff00ebbdac4ef7299d7c57019fc20ffdad1a78208cc8431333b092c72e25d03409054ecb32d92e067025c104b5e7c791b300312b081be12f8c07acca76ec1d64cbb038db351c2626bdee13236e6a236cfb23c5f36c19ab0c8461612a045c71d01b6f083b90ff52303a462ae517bec150c74880bfc782e5c0d92dbdc3353209894ace528103c42e42683") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @multicast1}, 0xd, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='vcan0\x00', 0x400, 0x5, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) open(0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000c00)="cef447c3105e89656b1ac2bb20218506b0cfdb57c7ff4f46302fe2983ec8916236bbd3e47327a94621c9beb39d8d88b4222d618e279ceaf424cbafcfbaa83245dc94334f8ebedac42d80ef9a4901d99e890f22ed4d7393996e0fe4f1d2764f07d08f48cb564efa9c54b18385add667633180e7af87ae8dca3d1d4121a53e372426fcb88ae99c1de5ca2ab2840f0d83fcf55af2e0da", 0x95}, {&(0x7f00000001c0)="97cb405b13aee053da452317acbc594447d4bf0aaeae6c1850c9c91d481d94b692e786e3d750507bbc47dc0e2f6639aaf3e0a5a3", 0x33c}, {&(0x7f0000000540)="e5", 0x1}, {&(0x7f0000000640)='|', 0x1}], 0x4, 0x8) splice(r0, 0x0, r2, 0x0, 0xe211, 0x0) 13:42:59 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100000, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0xdbb2, 0x20}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c) 13:42:59 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40000, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@loopback, @in6=@loopback, 0x4e24, 0x8, 0x4e20, 0x7fff, 0xa, 0x80, 0x80, 0x16, r3, r5}, {0x2c0, 0x1f, 0x2, 0x7fffffff, 0xa4, 0x2, 0x200, 0x400}, {0x5, 0x6, 0x4, 0xf75}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x33}, 0x2, @in=@multicast1, 0x3503, 0x2, 0x0, 0x7f, 0x10000, 0xffff7fff, 0x4}}, 0xe8) write(r2, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:42:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000040)={0x275}, 0x4) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000780)="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", 0x8d6}], 0x1}}], 0x1, 0x0) [ 749.511997] audit: type=1800 audit(1574516579.381:177): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=17341 res=0 13:42:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2b, @loopback, 0x4e23, 0x2, 'ovf\x00', 0x8, 0x2, 0x6b}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) [ 749.681131] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 749.692672] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 13:42:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @remote}}}, 0x88) [ 749.843442] audit: type=1804 audit(1574516579.711:178): pid=19228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/443/bus" dev="sda1" ino=17354 res=1 13:42:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xc) 13:42:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x400, @multicast1}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x105, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='gretap0\x00', 0x1, 0x6, 0x7a46}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:42:59 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x81, 0x0, 0xf9d, 0x9, "c03020560da4b765dc21e8c26064555e0d4db708fe5fbaa9b1ea9d1fc5c275ec"}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 750.112872] audit: type=1804 audit(1574516579.981:179): pid=19237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/492/bus" dev="sda1" ino=17331 res=1 [ 750.240139] net_ratelimit: 12 callbacks suppressed [ 750.240145] protocol 88fb is buggy, dev hsr_slave_0 [ 750.250375] protocol 88fb is buggy, dev hsr_slave_1 [ 750.748711] audit: type=1804 audit(1574516580.611:180): pid=19261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/137/bus" dev="sda1" ino=17338 res=1 [ 751.360144] protocol 88fb is buggy, dev hsr_slave_0 [ 751.365319] protocol 88fb is buggy, dev hsr_slave_1 [ 751.510546] protocol 88fb is buggy, dev hsr_slave_0 [ 751.516054] protocol 88fb is buggy, dev hsr_slave_1 [ 751.990135] protocol 88fb is buggy, dev hsr_slave_0 [ 751.995314] protocol 88fb is buggy, dev hsr_slave_1 [ 752.310124] protocol 88fb is buggy, dev hsr_slave_0 [ 752.315460] protocol 88fb is buggy, dev hsr_slave_1 13:43:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000fed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13:43:02 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000067, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_dev$cec(0x0, 0x2, 0x2) dup3(0xffffffffffffffff, r5, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0044dff, &(0x7f00000001c0)=0xc72fab99f756256b) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x140010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000100)}, 0xf039d8665c5467ec, 0x0, 0x3, 0x0, 0x45, 0x8000000, 0x1}, 0x0, 0x0, r6, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xb) fallocate(r7, 0x3, 0x0, 0x8020003) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r9, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x5}}}, &(0x7f0000000180)=0xfffffffffffffd57) 13:43:02 executing program 3: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,aname=posix_acl_accessem1([(em1}vboxnet0,dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0x8, @mcast1, 0x4}, {0xa, 0x4e22, 0x34, @ipv4={[], [], @multicast2}, 0x1}, 0x0, [0x8, 0x0, 0xfff, 0x5, 0xb75c, 0x40, 0x2f]}, 0x5c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @identifier="71359f2360ce0edc41b012a69857c2ae"}}) 13:43:02 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x4, [], "e85aed469631a0166be4e53fc0d2236d"}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) mkdir(&(0x7f0000000100)='./bus\x00', 0x188) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) 13:43:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x759, 0x8000) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 752.594083] 9pnet: Insufficient options for proto=fd [ 752.792125] binder: 19266:19277 ioctl c0306201 20000000 returned -14 [ 752.830969] binder: 19266:19277 ioctl 800c6613 20000140 returned -22 13:43:02 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='vegas\x00', 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0xc0c, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x0, 0x5, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @rand_addr=0x4}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @multicast2}}]}, 0x310) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r3, 0x1edb8000) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r4) accept4$ax25(r2, 0x0, &(0x7f0000000340), 0x80000) [ 752.865041] IPVS: ftp: loaded support on port[0] = 21 [ 752.891716] 9pnet: Insufficient options for proto=fd 13:43:02 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472183a733d66642c7266646ea950", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3de2ef27ce50d17e2ce9f3ef2ae6e859e3ecc550382e5571413605caede4060c7d6e5ab532c90cf521bd0ad4f0d2df279ecc2a3c97be5547cb0deb9bcdfd1e9118c5568df0c9475523e6bf387965135877041ddb3535363255601f4e0440f023bb2814346fccd59beea04beafafeda993eaf4f1042c4414afd37156e1eed57015b140c7b24075b0730eef2b6adaccaf30b9ecc8fb8e9f680287fc8a925f7bd0353fa01a981b45f5de29820", @ANYRESHEX=r1, @ANYBLOB="6c00742533e1c531216d04f4d83708265fe16a5ddc1378ece6affd668532f27bcff0cd0c1e4c641f655d9df67c96fa9ffa08a298a02dfe616496ea084bbaeb45b0d8d84f"]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000080)="a226c346e9bbac40f5941454985d486dcea9a28bc43cb7aabadf3ff1b52417c61be3613e7d213c0eb017d4bca6d787e70dfbf238a3016c4ccb8e14d20f7b30", 0x3f}, {&(0x7f0000000100)="75cf58f8c001512815bbdf5ffe5c693f0309016c24c00d3377587499c1a029a3e23b044a71", 0x25}, {&(0x7f0000000140)="f63c166f0a03601f0890feca1bf9529ba803acb724f5c68f11b0495f7839a467acc85b8aebda36bbd74ef0bd874f1913812ba804beb623c0bf2f5238f5d3c6ebe3e90b1155bc3951bb17444320fb72f9df88bac8d6c1b6121986fe67987245c39cf995c9b0ba6ee69e0f60f3f072ef9d8ba701c3b3edac3e091a00a896b26b253f593b2522631d8891cf768b4cbda5f71d449fb335c8ad86c9c2d0a6f9299a6803f2231b136a4f3234", 0xa9}, {&(0x7f0000000240)="e6b493e3539e5be1fa3ea0ba896a0483652fa95af7c1597984730c95d87371408a14675756580d9fda3fef1777ad70311503054077f5c00646cf71ed070c3426dc0910562d396915e4012c6c7650b82da07ebea48d842d36b7", 0x59}, {&(0x7f00000002c0)="be659263cb87e04b662f14a7272de100800e438174d833c7f63c7bdb2600b07a73875690f59cdd4c8183256aeec6c074e6bb8218e2a437aa76f511024fc7246e31d8db97848e381896919831ebbe4205c5f15306d9264a612492ee15bcb6324faed503a3d2eb8be9b162840e6d29ae05303f69bfd2eba115f7affc63817d", 0x7e}, {&(0x7f00000004c0)="008c0ff40f428f01950c7769c9c521b9f9e7a5721e36e7622bbf5c119900091e3145375b735efd7ed29d3284622744ec4697de515afe0e45af97b5082a422086f8ab61c8f74888aca3e7ad46a299172064da1f5167fbf75dacbbadd2804a8e3c69d74a9e30726209fa9c5246e8f63533f0c8e066d19e24abc697b282b3aacef83a8c70d85b5dfe9542a844fcd2be21bc3c87ce727b9fb4070d069b8f3429d4382310b0cd3f66479906b8ab393b26264acc7f179147c5f30760e223c75706c47ee728a7d9efd7ae02eb8ed3a3796a07a936224d5509382e54ac01a2354bde4b95c4bc6f002cc1f264d149130a83464300f8357bdc775337", 0xf7}, {&(0x7f00000005c0)="70e8a3e4865420fcf00eecff23419fb4bb19a43edfc0493981e2bafa25780ca66133a31a8038fd3c07a0e417166f1df4961ec8ac198f1c99dda9a037faf7139c4eecf349c5544c3a885140f78ab546734aa3b4694b3b86a04214331d88e2e7c90a11642b2be797f026ddf75f183cfc60f075800713510d0fd073399975542d15afbd951b2aa0604aae95f9b5f1c306a892f0226d3439fdbdf29f81b555c0efbc2db7096897952e7c11e3d9d3f60d15ace0da7e4ca081a85525b3d37fde3d5a0dfe7bab282d327ef25c20a19ef32c7176c625f3c47c153715c82597936533302145ae63f8296c3c9aedd535549e", 0xed}, {&(0x7f00000006c0)="28d0164b5e59d945314734f3b82fe0ac7014bafdb9ca57882b18bac3d4bbd777db36a918cb41d639de944696751952a204823e1270b79ce1bd101ad290b7103e912076a8e0728b04162eea463ca85e32b04c5017", 0x54}, {&(0x7f0000000740)="bf6cc9358ae85d7b2209779af97904bd0c0c73f256ee3ab1a9f4c7c346604cc895955157c21e1dee5f33d3d685e424ce3c624514dec243fc5971897689254596446b44d2361748f25f9a11e4d90771373f9b089407faa15abcb0bd3343f32ce55f86eae80a61f9a89c03cf512188fc6f4dcd79ded130a3c8c37f61250d880a59f2f355263589d9d9ac53e771e15b1dfa5e582e", 0x93}], 0x9, 0x679883c40b5ebb79) [ 752.979103] binder: 19286:19288 ioctl c0306201 20000000 returned -14 [ 753.007250] audit: type=1400 audit(1574516582.871:181): avc: denied { map } for pid=19286 comm="syz-executor.4" path="/dev/binder4" dev="devtmpfs" ino=14684 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 753.007620] binder: 19286:19288 ioctl c0306201 20000000 returned -14 13:43:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x340447fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xd) [ 753.081890] binder: 19286:19293 ioctl c0306201 20000000 returned -14 [ 753.110890] binder: 19290:19296 ioctl c0306201 20000000 returned -14 13:43:03 executing program 4: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/202) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 753.230850] binder: 19290:19296 ioctl c0306201 20000000 returned -14 13:43:03 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=', ']) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 753.325805] binder: 19266:19277 ioctl 800c6613 20000140 returned -22 13:43:03 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000067, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_dev$cec(0x0, 0x2, 0x2) dup3(0xffffffffffffffff, r5, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0044dff, &(0x7f00000001c0)=0xc72fab99f756256b) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x140010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000100)}, 0xf039d8665c5467ec, 0x0, 0x3, 0x0, 0x45, 0x8000000, 0x1}, 0x0, 0x0, r6, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r7, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xb) fallocate(r7, 0x3, 0x0, 0x8020003) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r9, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x5}}}, &(0x7f0000000180)=0xfffffffffffffd57) 13:43:03 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x400) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 753.458085] audit: type=1804 audit(1574516583.321:182): pid=19309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/444/bus" dev="sda1" ino=16690 res=1 [ 753.482819] 9pnet: Insufficient options for proto=fd [ 753.511647] IPVS: ftp: loaded support on port[0] = 21 13:43:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) [ 753.835574] audit: type=1804 audit(1574516583.701:183): pid=19338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/138/bus" dev="sda1" ino=16833 res=1 [ 753.882016] 9pnet: Insufficient options for proto=fd 13:43:04 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x4, [], "e85aed469631a0166be4e53fc0d2236d"}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) mkdir(&(0x7f0000000100)='./bus\x00', 0x188) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) [ 754.616139] binder: 19349:19351 ioctl c0306201 20000000 returned -14 [ 754.628039] binder: 19349:19351 ioctl 800c6613 20000140 returned -22 [ 755.510116] net_ratelimit: 8 callbacks suppressed [ 755.510122] protocol 88fb is buggy, dev hsr_slave_0 [ 755.520135] protocol 88fb is buggy, dev hsr_slave_1 [ 755.670533] protocol 88fb is buggy, dev hsr_slave_0 [ 755.675644] protocol 88fb is buggy, dev hsr_slave_1 [ 756.150128] protocol 88fb is buggy, dev hsr_slave_0 [ 756.155260] protocol 88fb is buggy, dev hsr_slave_1 13:43:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:06 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x4, [], "e85aed469631a0166be4e53fc0d2236d"}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) mkdir(&(0x7f0000000100)='./bus\x00', 0x188) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) 13:43:06 executing program 4: socket$inet(0x2, 0x80000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) sendto$inet(r2, 0x0, 0xfffffec0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0xeb) clone(0x85400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="9b377892289382a0cf733822054bb1aea9aea36595b7dc98066f895b3a4f8f774d4afd6166ebcdd31d7a122a155abd9891e32fed33c1774102fbbcd9fe6f9772742007df63316738") 13:43:06 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1c48}}, {@noextend='noextend'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, 'vmnet1user(systemwlan1wlan1lo'}}, {@privport='privport'}, {@cache_none='cache=none'}]}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:43:06 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=', ']) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:43:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 756.438873] audit: type=1800 audit(1574516586.301:184): pid=19338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=16833 res=0 [ 756.470191] protocol 88fb is buggy, dev hsr_slave_0 [ 756.475365] protocol 88fb is buggy, dev hsr_slave_1 [ 756.568653] 9pnet: Insufficient options for proto=fd [ 756.708955] binder: 19358:19381 ioctl c0306201 20000000 returned -14 [ 756.732591] audit: type=1804 audit(1574516586.601:185): pid=19382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/445/bus" dev="sda1" ino=17058 res=1 [ 756.749513] binder: 19358:19381 ioctl 800c6613 20000140 returned -22 13:43:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:43:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb49e, 0x282602) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000001280)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) write$UHID_INPUT2(r4, &(0x7f0000000240)={0xc, 0x1000, "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"}, 0x1006) [ 757.132462] audit: type=1804 audit(1574516587.001:186): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/496/bus" dev="sda1" ino=16690 res=1 13:43:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x4, [], "e85aed469631a0166be4e53fc0d2236d"}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) mkdir(&(0x7f0000000100)='./bus\x00', 0x188) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) accept(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) 13:43:07 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) getsockname$unix(r2, &(0x7f0000000100), &(0x7f0000000180)=0x6e) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 757.600198] protocol 88fb is buggy, dev hsr_slave_0 [ 757.605414] protocol 88fb is buggy, dev hsr_slave_1 [ 757.670016] binder: 19399:19411 ioctl c0306201 20000000 returned -14 [ 757.704467] IPVS: ftp: loaded support on port[0] = 21 [ 757.723905] binder: 19399:19416 ioctl 800c6613 20000140 returned -22 [ 757.742040] audit: type=1804 audit(1574516587.601:187): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/139/bus" dev="sda1" ino=17122 res=1 13:43:07 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@seclabel='seclabel'}, {@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}]}}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:43:08 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1c48}}, {@noextend='noextend'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, 'vmnet1user(systemwlan1wlan1lo'}}, {@privport='privport'}, {@cache_none='cache=none'}]}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 759.498739] audit: type=1800 audit(1574516589.361:188): pid=19382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=17058 res=0 [ 759.883595] audit: type=1800 audit(1574516589.751:189): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16690 res=0 [ 760.540920] audit: type=1800 audit(1574516590.411:190): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=17122 res=0 13:43:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3}, 0x20) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x0, 0x8) 13:43:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 13:43:10 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x40, 0x20000) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x4, 0x80000000000003}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x80, 0x200, 0x4, 0x40, 0x5, 0x8}) [ 760.630121] net_ratelimit: 12 callbacks suppressed [ 760.630125] protocol 88fb is buggy, dev hsr_slave_0 [ 760.640246] protocol 88fb is buggy, dev hsr_slave_1 [ 760.897627] audit: type=1804 audit(1574516590.761:191): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/446/bus" dev="sda1" ino=17313 res=1 13:43:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:11 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="742189879e0f5949c87266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 761.116400] audit: type=1804 audit(1574516590.981:192): pid=19449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir351021613/syzkaller.11yVg1/497/bus" dev="sda1" ino=17363 res=1 [ 761.378846] audit: type=1804 audit(1574516591.241:193): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/447/bus" dev="sda1" ino=17372 res=1 13:43:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x94000, 0x0) accept$packet(r5, &(0x7f00000076c0)={0x11, 0x0, 0x0}, &(0x7f0000007700)=0xffffffffffffffe0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f00000002c0)={0x9, 0x2, 0x7f3, 'queue1\x00', 0x4}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000007740)={@mcast2, @ipv4={[], [], @broadcast}, @rand_addr="487d6a2c67c381b2406a88e27a488658", 0x2, 0x400, 0x2, 0x100, 0x9, 0x20000, r6}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000001c0)={0xbb, 0x3, 0x0, 0x0, 0x6, 0xff, 0x5, 0x9, 0x1, 0x6, 0x7, 0x7, 0x0, 0x2, 0x81, 0xff, 0x20, 0x0, 0x70}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffef7, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = dup3(r9, r10, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r12, 0x894b, &(0x7f00000000c0)) fchmod(r1, 0x122) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xbb8) 13:43:11 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="745361878e8db3a911e26e731f6664d9fccd598e1872754e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 761.649210] audit: type=1804 audit(1574516591.441:194): pid=19471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/140/bus" dev="sda1" ino=17374 res=1 [ 761.731245] binder: 19473:19481 ioctl c0306201 20000000 returned -14 [ 761.750168] protocol 88fb is buggy, dev hsr_slave_0 [ 761.755358] protocol 88fb is buggy, dev hsr_slave_1 [ 761.772162] QAT: Invalid ioctl 13:43:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 761.785592] binder: 19473:19481 ioctl c0306201 20000000 returned -14 [ 761.808299] binder: 19473:19481 ioctl 894b 200000c0 returned -22 13:43:11 executing program 1: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "000001", 0x30, 0x3a, 0x86ddffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x2b}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x400000000000122, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x80) 13:43:11 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='\xb9p\x80', 0x2000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@uid_gt={'uid>', 0xffffffffffffffff}}]}}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 761.910113] protocol 88fb is buggy, dev hsr_slave_0 [ 761.915266] protocol 88fb is buggy, dev hsr_slave_1 [ 762.012676] binder: 19473:19477 ioctl c0306201 20000000 returned -14 [ 762.036670] QAT: Invalid ioctl [ 762.054936] binder: 19473:19493 ioctl 894b 200000c0 returned -22 13:43:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:12 executing program 1: r0 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x9}, 0x109) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/175) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 762.390871] protocol 88fb is buggy, dev hsr_slave_0 [ 762.396589] protocol 88fb is buggy, dev hsr_slave_1 13:43:12 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x400000000000122, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000100)=0x100, 0x4) [ 762.710313] protocol 88fb is buggy, dev hsr_slave_0 [ 762.715521] protocol 88fb is buggy, dev hsr_slave_1 13:43:12 executing program 0: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000640)=""/210) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f0000000000)=""/22) sendfile(r1, r2, 0x0, 0x102002700) 13:43:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) [ 764.118960] audit: type=1800 audit(1574516593.981:195): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=17372 res=0 13:43:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) r2 = getegid() setgid(r2) setfsgid(r2) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000eb5a0bc5259da5f07aef1d8e3bb03eca71d22cbc9ee8ded", @ANYRES32], 0xd}], 0x1, 0x0) fremovexattr(r3, &(0x7f0000000000)=@random={'os2.', '}-\x00'}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x144000, 0x0) fchmod(r4, 0x82) lseek(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 13:43:14 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="02df0c27a8db27d9e1e0227dd2cd9be6aadbc3a2a71915d3ba84856173cd3519b71336f79a1065dd6ba6e4c1f1a5ec75a693950c199d0394950bdd8967aeb9632ef833b6b6c33ab67510ab1374052a0cd95f5e84fb8da99f2904703ccd4db6dec4cc0dec", 0x1cf}, {&(0x7f0000000180)="f569d5403dfafba46303e38cbca23f66fc33f38c2a778744962167efcd88a21a4890c5f8c381cb8c49fff6471a47e97e531b00bf03bbda", 0x37}, {&(0x7f0000001240)="4d9483bd496a54c2144d0d78eb7f9098d8c8fdf22fd2874372a07677e73540b1515dcfb21148530fe45a2de5d23976b9b8731542ad558194dd9fa0b8804ec64f5cc970dc2312acf9084718ff813b313797b584754a01b54b0add71b462e08347bebe8d5fae729a3690e7cbaf4522cf047fc9d3a594320bafa0d10a1fde1a967d79bb3c31e9887fc86073e12450baf32bb835a1eda0bcc81dd4820d8d6f3a3bfd0af2da5f70546acacd", 0xa9}, {&(0x7f0000001300)="f586a2a1a0dfdee1b81edaf7205e5a490bc55453e2ed2f4276e3e6eed5da653647c4c154e66e6c57bb8a7e03779b583b88f2b297ee532ffdd718baf45a5ccc7720303586d0cf5d3654ff234d0030a6427d71de692c418ec3bfbb8ed6ddaea1811d3887888972486a09211206b5206d3ff97598da3bdaa626a4b9a2deb45ffafce94306f93cec8a01a8a8240c7a06e83a43c0e49aae90", 0x1f9}, {&(0x7f00000013c0)="42b1012722896127b971eb5b606b63149cfca49af3178949461f79250c8e3610548bb32b2fa86caff9b3c53ca94e3bd79236fa37c87fde850166f875077ae471c0913ee811cd5a7236f3c28d514d97336f8b1890be1e9a222dc4f1702ea0a6e3e3bca2cb6d2a2e93f2e990195ea506a5ea18a0b61ffc0c82598981adc888ba0892ffba199e3128e4f16f2f17849448584a9e6b73364d326b617bd58bde087dbc98f625e839", 0xa5}, {&(0x7f00000001c0)="fd99452dfa6dcd006baec5d1e4c47b30835f2db9878521700a7434f814a4ab6c8a4b3ec7b03c1b6c", 0x28}, {&(0x7f00000015c0)="46197cee37fbfd549675bebca1fe8be746f21b68e35c787b66f77ce58ca1ec966aded782417f656de909742c1bf139ea053d87b4c78dc0dbe1c9d8b618f85eb2c12bde64384b63bf7fdf1db5cd685f10f1a86b0208d9dff74223ffbd099797fd54a1a690a1efaa05220c5c5f842aa21b5464ae5217fbbb1f6b8b49273af2546fdd88c94ea839854f8bfd2d71aae068945fa8be", 0x93}], 0x4, 0x0) 13:43:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) write(0xffffffffffffffff, &(0x7f0000001d00), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:14 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="2e2f66696c653000eb5a1eb79bd3dbe9d10af3521246ab049c9a016d22036a7b4c39d92e310156dd401cf0cd99c2e9bacf76d04e7d23d36ef118a3b2e3a44018b57cf32310bf8993ce9bf71b2fba337cadb0cf61b8114bea12965a14ddb1e62f6450ba233f12f25ba97a43d22260d387c499770054ef16b11419ee51f55eeec9a85dba3f2ee57ed22cdbbad55ca0000000000000000000000000000040ac675a6b936e76cbef6ed796f461fe02b2f1c600c6dbada2d6d9bd3ca8f72b4a7fc8f3d240c0ba6aab5f70d292eac9ace9e21746d1292388a00a4ee34401a1a148f86f04dea402986d4f86952b4494c88f9afeef94e2d142a6d31a37617c8d6eec82ea54208e"], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/13]) geteuid() fstat(r0, &(0x7f0000000300)) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x2020024, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30313630333230363532313132323330363235363331332c757365724ddc015f69643d35d5a1c72ca8e126c32765835a7d16d79be67313dcb55f8be1b44653f6c8c0ede627ed94e6f740b574117162112fc3d2ad108d28fb82c8b70402da918275c038ea6dd55224544a61f186685780a4bcab00f75156e8021a7d97d90e44305bc3ba33412a70663538e7dbd625038b2ee33e65aa3e96839b56d3c0eed8c7953c7ebcdd1659", @ANYRES64, @ANYBLOB="2c67726f77705f69643d459e322ac65b8e71840588ea93124fab5a9fbca4aa4a1dce25", @ANYRESHEX, @ANYBLOB=',allow_other,default_permissions,allow_other,max_read=0x0000000000000003,allow_other,rootcontext=sysadm_u,smackfsroot=/selinux/avc/cache_stats\x00,seclabel,\x00']) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') [ 764.430180] audit: type=1804 audit(1574516594.291:196): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir588304817/syzkaller.4hnYda/144/bus" dev="sda1" ino=17385 res=1 [ 764.514948] EXT4-fs (sda1): re-mounted. Opts: 13:43:14 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x440000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x8000000000000010, 0x0, 0x2000005) fallocate(r1, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000005) fallocate(r3, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x16) listen(r4, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0xfce, 0x600000000000}, {&(0x7f0000000140), 0x0, 0x8000}, {&(0x7f0000000180)="2f8cc70a1781d45e4562c4e1aa16de172edf41069e49e134f6c15825ecaeb184342d8f66820364a97c", 0x29, 0x3}, {&(0x7f0000001640)="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", 0x196, 0x7}], 0x40881, &(0x7f00000001c0)='/usr/lib/telepathy/mission-control-5') vmsplice(r6, 0x0, 0x0, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) fallocate(r0, 0x2, 0xae, 0x0) r7 = syz_open_procfs(0x0, 0x0) r8 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_create(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7368656c6c5f657865635f743a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6e2d636f6e74726f6c2d352030303030303030303030d288b230303030303030323236202e2f66696c"], 0x64) ioctl$TIOCMGET(r7, 0x5415, 0x0) syz_open_dev$vcsa(0x0, 0x20, 0xdf8c4b28a379b948) socket$inet6(0xa, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r9 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 764.536524] EXT4-fs (sda1): Unrecognized mount option "fd=0x0000000000000003" or missing value [ 764.598334] EXT4-fs (sda1): re-mounted. Opts: [ 764.637643] EXT4-fs (sda1): Unrecognized mount option "fd=0x0000000000000003" or missing value 13:43:14 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003c80), 0x38e, 0x62, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@remote, @rand_addr, 0x0}, &(0x7f0000000700)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x8020001) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r8}, 0xc) sendmmsg$inet(r4, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3eb1ec092471e83144e4a3288abe73140dfbe3eff8f2e93f736d9dd558b891f35bd", 0x59}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730ad0f3d41d959d78e2c8", 0x24}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000500)="e2aba58ddeba1c90d39050709a9558c8f1af917a3fda4fa2e7efad4fd8168e1309338d053fdcab", 0x27}, {&(0x7f0000000a40)="f354b9fa3b2988465ad6bfeaa237ab4f58e4744e82e5dd410d5d4152f9c042605f8c73129342780f355a533472b9c6098b46ad52c0147edadb826507aeef75029179ccb38dd04551e7f8e0eddf51d526f9899c31db90d03aa142b1fc2f16a6d85610ed3bbbe85245d1048a9775f80e6ea787564333a5432978c16ccc94f101d32877b019009271834dffa42c50f0dc7406684a307791a810440e4a6bbedefd321ea85b6b2fcb344128f9186f491ba6256539549f6083cfa2b52866eff508b68a4b1bac02bdafe035a371c32c160c62df6f45d5f5f4f94e9aee209f23a6f2aa01a42d9ef4e59cf4bcf60e91b0b17cef4c696811c05de8ed829f10d8f7b8b8f52f665aba92b0593f11d0bea23fbfe40f1d9e25691f0093379a92ce283b22c5698f4e4af1eef0e3e0b8070d00ab228eadcdac9bc6b035f35b35bff7b9df1cd55e8efead07773b190b4e2f609528f6a5ef9313c45c77591baf006e78cc703e4fec6b7ec27a4bc256cfaa8a442aa1aa7eefbc66691a20c8c1272ef1d31080d6ad3a193b760c4616a030184c1dfcdf3c7f2837129ad098ec3ec6e4f3d942146d301ede8e412ea58b1801d0a037a53980a3ab721a79d89dbdf8db9f5e0a35ad96aaf4e208c8c706580a52e85810db8579ee9efe7cf3dfb85a2216c1a7aa43fbe9d6714e53671e4e433ce0eae164ca6e09083cb17c05f0b19d59f31a4748f7fe7501e65c73d1643b5b823a82c801288410f4974eba2822b440cbc33a4a6b2415225c2a02c16dba01ae00d023747ae8e64be135f825f2b414b9467cbcc6f9711f0b6c979ac6ed183363b3d79208fed114d1217d6459b336cad9a9ecdd6054eacc3b09d7e3e8ccbe97a1e16109d62e626ea7e99f4450f310fc319f97dc08cb962361ecdf4e49da7cad6241d05d884508833a9cb6c560e9c8cc5a947b0b9ab125abcfb182b9b1df4e5d693290aeddd4c72166435718672a730a355b53a3125233d44f267b028307b59385103eaca3e9a2aba5a4199c695f0cfaac9c33caaac5dc70777bc2c7752d0ddf4acba663c04bd793ebc64b77b69e9895e0eb4c25f82ccf884d063a5a5ad871207dd19b1c135fb840191c274b96c771c4bf2b24efab2ef11d8dc77ee36a662ce063200066ac0e983b21853b99489662aefbfd9bbe43149d8fd9f5e3da25c3e79ab0ae0272ca57a9229cfab90003d7ad751c503677a3e0f689cdc751e4bf1346e72418bbbd9b0394a9b04b27750952ecbf2bd97cf3d8ff6a84341079ed8f41e100df11589fea0976b9b10fba8bea108ab1a1be768f5542242458982ab573676103e666e3aa6c2fda1c50bf45957e0d56a7781832fe26a944057152aed5dae27636600406dee73df4dd533ee3e26c9d287d54ad3f3080b46a7858e0bd541276a6229bddb47fe8a6a418f09fb2d46146c6fa1d10b09a3c036044c40aa5dab9e54324ade1bced5d9d654f2cf97955d432752f195871fa26490c4eeb0efe30145dcec9ce12137dff86b46a0b2cc6fbd74a1e87037ae1a811f009821293d38e0166e5a6eadbe77d230e82a79715a75fdf167584f4a3c84abbc1551f2482572dd2671309f856d2ff78cb65067d64160b0ee1c786b2e7530628c018b705da4de9e3c3539ac0fcfcf06ec1e5b56669099ee043559b475ccd1e985c28822649aa80780243ed6578507e8e2756f646d5fd8369aa323aadd34344ff56fb152527a22e623da5f889da22082d8918ebef1096fec9eadea7d5f7e10fa97e6055ca328d2cbce84b8abe250bc8758837a4150fa61e3dda4301b716e94f310d5274ca725863b4b0a32f2cadbf8d6e0324c6871b220d052cef787f0185ce3f9072b575a8fbfc5c89c5fb3f580414e4c8f4b2f304ab688f20577b6602ddbd42dbf72be5cef43c29e4296853a9dda2f3e884f5495d0a892d9afbc5913601dfaaf296cfadd27001375137f2568fbfdca973026f3c4bceedf4432bd2341d457e2e69e9f3cefc4781723bc22ba7b34eff14c1fc3a3c4074968045714e985cba40040b51beaa4a432e62c7dd064949cf9876427ec57ddf4aad5826785f3e9bf0f35f84b124be98babc96af9156526990df479300ac604d9dab804ffcd1d105cdfb07970e4cfc69fe2540abebbeb92e96cc182037126585bd783d479aec4935b5600a9aad903d40c419859fde29689ac0557f0c29a2331008d6710a571c485eace637b209951836f1fcef7b624f7d86df6c0c336ec6f4588a689a840719a87f8885c84e414d93b159bdde3643f2581b82c564e7f4e7ca98a35682f0de477903441aa5532d48ffee38c46f70bea9a74d235e7d0f42c3c826284533ad80504bc78ae626b6c1ed7d3a7be24bc30dfae4489b4505e2d4f52095f81ecb90c3c5a5895b5fef1d430ecd0fcf75fc65eb5c2a7fdadd4f87b2e9d451aa2344d84cd1a912938a59cb61a347d50c1c146b2f70b6119a69bfc48b2e88d5a3c99e5e36443ea56fb9a0604a0586ae36806ed4e9bccdcef63bbced4c75b60507de699546321a874d2f2940a35d5b1005367a8134006599b343876191f4663ac42dc3b7d98cfcacdfc0ac7b214fcad53e6b131603e1f66a67d96f509ef9a6af34bbe7cd2338465f9589eb6c8939f881854650e50fc63fb347fe0e00f2565c39cf97982237fa09416bb4d2b65bbe5923fb570626200af43991b21dca1ab46421fb3df05ee93eab2c1c63eff0c5b76bc42385cef8a8c0a950dc6eae1a69b5f229a30b03a23e73fcc206dd20fc0db9c314d22203f4f9166f822b4f4873128c6cd899fd10f82b7d932c5e84d0e65660bb4452e2757bcaa26169ee3dfd5c3a9def15c2015f403e648efb8fc8d3a8b8592bd05615046089ddf78ca5837a9c9a8746fb44b7c6e0228118880ffa470dacf6bffa336aa6469b907ce91fc371a705203da5bd5e5df3e1739b568d13c738854f8c20f75bdd550e2bf58d8b2654ac27829c6780beba10e7d5e6c4656f707e9d9a62a4d57566d28bdd66dd2cada9237fefbeb6f9c38debd259fbf4145298bb90309620535436764b9f95c997eac0fc598fcf62f96d615e426869a11fc965275f33ea561eebb953ad67c48b9928975eb6b910f52cbe0ad612513f31d5a5bcef68fc664be681414695978f7e876ac515e3d752666a5412e13c731ab39cd1a275bc127aa49c086dcea2d2cbb68adc9312a91f86e389858ff5cc156aeb4f14f4bf4ab8d86bf80dc56c3a23ac294094aba79ed8ef24ee21a6c7252e6653ec95a1bdab68971671411db13c4d01f3665e81f9f680476a1e7842f21845a21073798ed34b4df54ac2d2ca8d64978436bf4dd852670e2530e995b9139a4cd164462c869fb2ae31d3e7ef93a4ccb4a3dcff225dbcf354a069823e0aad04a664b40c55ee4c80daffc4ed7444c2eb38f2af379bb329aff66a5a4e170b0f02484c74894366e14b23640dcd0d83653f38d3d17a8f1a032005e21f1105b9dc8cf4c75a1484952197af3b963c7da3199c5105862fe3a5af46c43635e37ea379419ed8fa325a2121d43dfa4ebd717b32ec30acac65ba9cbd2a213376e28d67570c4dffe71a7acc58ca14e3aa68587e38b67565475afe2f5e743ce17b76fbb004e037e5b2076190b86161edc146f1169fde94b192a23509b44917403013813a482fcf7960773644d85ab2c5994c93f40d957aaf914d71d5c9713a63b84c211209f1f29313ff92f690ac93de7b46edf542f192d977e7c0c92126f8a9768badcfb525e53cb3d747300ab3b34ed3d42885a63d808f84777dfdf46dbe80bd234a682535878e80c2fed439793c1662b52c6c1a3bf7d6d89bdef08e64e88be5cc871d6a3a26fc3941eb0db79e82a9b89478d745b9f3d1f408bea8141156653559c9697672974519d9c89e36dfdce5898919f5ef19d6686fe5f2567bb0a39ff4bb1fd0bd9b55d2cb76cbe2fbf0147752629be014bfd1d89810b2d88212db0a1068722e9089f5a73bec16ee975bda88c8fdb842469b70b56c1dcc777490b3c8581659d35213f8484e6445aac5c6c4bcdd39814fdc1bfa86043c0b49eef7e1964e1fdc89c0220065ffa5423120824aa55cc6118e4d2c9e1bd4a7aa3a94699bb7cd9decb51b7057e5c60c887e7489bd0e1ab7a85f0b0327d8a3115941268bfa1d6d4c161b9eecdf9103fd055148426308428fedd7ccbdb9be4ece9a513c489e6cfff76e4006660d5c1c04227da23c96bb72d45f2bea1fde02fc5b9fa8000b3eec2cf69f25dceb1ea7de49f70b29ef101a53aa9d8c54ae65467db58df24e2c4a3734a09528f838654bf2b34bd4a19f15b06c023e840ff66e274c5a90cf0201d33489571b786d09872ced1da5d470314d71468d0c8ccbe28e7cd71e92c6345c91106b47a13283e4736ae8c63fee4bb18b0185ca918cbf83bfa5ad090002d4e7fa3b9e6aa0d85c2a1ae2a07f08641302db8bffa69d153f368847bffdd5a0a65c63c51c5877156f841250223538639bf6565dfebfb48c94b021ea88fb153cc88bcaee219bf1f18fdb7d8750d956319bd950946a004023b0189b70df74d3cfc283a61b5564a2f6c9bf50cdbde1c42afdcf261ab2ededb13199408443ddcd43a39be60c4620a31551d05c91da448ba95bb45a12c0557c46625d7aa21e5c47eb78e76fcd3d9d12c3c1dc3de6097b89c66c8b43aded600daf64f00e3de6d0a3d939892afa7cf41fa9bf36f3a7683868476e85ab8bc9012e613160db7b34abc5bae5c79782ca0ff683ff6228a8559fbdc8a611411a99853c914b5a4ce350db1dba9fee5080bca59a4f2715568b1b79ebfcf3e95e4c9e394bb5982e02b2f353588b76ee0cebf472d52e9e34dec433d6ec6dfc81e52cc3d59abdb1df3a7f6eefacacf34fbeaf735792069f8cf8704ecda5db038d48a727a3ebcd0c8a6182c35b2244297c6f9eb446890146b17e9a1621a6f3510c2902e267f2f02367db2474681b58949987f3b79fa30821887e0690cc5b41cd61aa00c3ef7faf1878a9ffa33385b23456d1c75ed7701a3242ee7da024ad902edcf0b25d2b75df807b9b8bb4a3ccc60e0bf743a45ca01416714c2b42094d4616cf459dcfdb1f0ac99d39f00207e06853ac71d88268270b4c5007b9c52bb6eea9f5e2ea2c689c4b3265a9a55de2910cf5f14875bb2fae35c9b1a53f969cafbe59b49ebd82fb2aaa46953ca2e6ab48edfdc61de8a3b9b2b8be1f5af0d09927c8bdc35f537900ffa0112db1b5e2c59d20c98d91517365071ea1244a2246addef85d7f50447905e3528a5f31a6794ed07ac2fdc8e611c87b48f8276c0201ccbf364705086f45515bc838cff83d98ebc24c50b5d2465a597c627435b8fe5aadcbb74febf685b26b2c37b943720601a50923cd974fcc9cb5e00e8a96fff9d9f965218c85eb3bc89ffa2133ceb2cdf274f37013d4f8451600223f9ed048596d78ceca953525aa31910dd1ad56f58f080f4cf1e1fcdb8cbd72f071da262e13358eb13c1cadbf322dffae8968c7f325150c172fd619c320883f2b5d286f4cb221e7a9fd97389e35d6c8de1225d8ee8c0f3a76e94784af1bb2a2a5e9e03a3ca5db4ef2b672a952e6e9d21ae3189a9b8e9c95530c8f55462a636f83ff0239d50754a08e43320aa82bd6b0f75378ee089afd63687de6aeff0de914550a67e0ea4d1f644ac363214966205d7d1476fada60555957352454f0fce11a80fafd16932b148458bece36e1961bf516", 0xfc0}], 0x7, &(0x7f0000001c40)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001f00)}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[]}}, {{&(0x7f0000002280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002400)=[{&(0x7f00000022c0)="247badb355c651b14744280a13c3b8ffcb44beacbfe5f126189e667bcf69a0bc7cb25e2358332fb486915eec8cce7775876b447a45deb35e5b3f8c346e1b008cd8f583159970ca105cd1389d417e87c3383a2b893230e3635eb35502a705832a2d60d7a39dbac94ecca5ffd0da556dcef4ba376eb09519ad2820a60ff79f8a661d", 0x81}, {&(0x7f0000002380)="981176b1f9d40ffae09bf001311558ee3ee080", 0x13}, {&(0x7f0000002540)="7668884946f4985f31ce5a0698abbf12f91e08000000000000feb13b1ca910cb1b9902000000000000006752b125822dd71199ead39298707e7599088f7425077a19ab5b596178f9ab7a27d9cff7fee568927ca35f2a66eb1bd0bb885cc09569eaa8ba7eeeda3603aa8fdebe00d67ff3f2cc5782afbc805626299f0b42eb47f48f0e94404a", 0x85}], 0x3}}], 0x4, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r10, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000000), 0x10000}]) [ 764.747693] audit: type=1804 audit(1574516594.611:197): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/448/bus" dev="sda1" ino=17389 res=1 13:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb4181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffc96, 0x200007fe, &(0x7f0000000180)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000000c0)=0x101) 13:43:15 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x440000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x8000000000000010, 0x0, 0x2000005) fallocate(r1, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000005) fallocate(r3, 0x0, 0x0, 0x10ffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x16) listen(r4, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f0000001400)=[{&(0x7f0000000400)="bbb3380659c8c73124bc2d99b53aaae78d7795a8a5c80ae6002aecb9e0b985680dd82292d884fdf95e56c492299322a04e96113fa7a70ab9533357413c70675fb8d8a26d43fdb8a9c0b79fc811e023173d5d6b6e3138c14e4ca526ed3bd444d780ae9ca7330f5702cdcb099d3dd2cc65479e1514669532f3c5055747d49918551865344d0d032032a0e59306abad7b852b1383a987e2a48f816dd91e3ca19038893e83bf727fa09d2249fef27304696373fba489d1b4bfa5364410fc9ce2abb851744d19d823b47828aca73f9b3626ddddcdbd9891bff258adca2c406e8342b37ef674743464a87ef9227b20ee5f3689e7827cdfe4cdb5f47815a442bf8b5149636896b3873a9b88e8fbd4129084b878be7f25e5682ac381a0679f98ca5ed685308ebd2ac786902d46c8a31b7c3597b9254d787d87cc1676279d6a5cff10f83cb7cbd005876bb8bdb8d0ea1e96fbd56b3cde624109b277874e95569604d1b8f5e232371a52d76ad004be8e82fdcf764822972d4ba25c24fc033626fc60ea31e1aca124f5fce391a56764f7de194f7d36bddbde2f1c21713f3f6e96b148619cd530100925e6f5f6a86b6c34be8e9ea092dafc188b50253d348fd3bc4a3233abb3bcb0963cbdb0e7966be0825fb0b05304acac365dba37521dbba51ff8ff842b4c0e87225bb71ca65e05e98264404989b336a621aad1e0d274ff8978e89e2866fb0b19e1752f17aefd7db6e9833e8382aed71baf37ed986929dc4b342e57b13cfac842ba6ca5df26c4ec2b763f10dd1d4540a6f1a7593b826f03f35bddbb9a2afae6752e753cfeb7d5e8e1d418d983b4b238779bbf50bb9f27100c305b09a1e4afa4201e50032fa4622f92510ace0a2a80bc1357f347ec8da57aec4b0517a5753e52099858385b3ddd816b44fe1ff2c2b6dea5007bb98f0d25c807b28ef058f72541772e12875e5de2a79f276e53b5a4998ed9d1c1c5ae06d7cc82a99129fdd0d9542848beb23e61127966536ae7d967ba0abf7d61455aeeb963d1272175c417e9379f723bb4020ceb3511bd842d4d922e6c412708efbec753d98b1595e7ead06b57c6288f84ef1d74053813b66c5d9ae59ca83c2a74218bb366e029e528c854366e7d52f347e9354cd5959ca87b71895fae416b6614e47a5cebca0843fda96edd379953bcd39aaa05b1b671515130cf8fa2656e51f15ded170b72c85695b96882672defb163927b2a79597098f1bd291e4b2c081a2415c0281ba850d030b37355433db4be93e0b7eb7b001ddac2426cfbce805060fc54d772753b9191779c7a8fcd55cd9ee6168f1e1d04bf7e5ef5e03403a3b838c4ffe6ac77fd352b3f0bab86ccc5f424982f7f0b955a05a661a046f2708274ea1ad63b65489f63b45419bb135b2fb47a45d6ff561d5ab04070f2fbd4c516cf8f5d26424b5acbc206e6c922c23f76660efde56632bf0d4aa333887daa676f5179b5c124ad47c18346ea1710579632e5f9da5bb8f793e940d9957ccd00e3a5da0d2b9906f0f1f58d9c2da7bd98e6d19d2282ba4280456d2f498d865ca5845943249ca60eaa8f2a9e1079b82cdaa984da9e699f5a6acdf5f507d918673f9d1764dc4acdbb5775ad88c8492db8f2610599adfa4adaad5492e761ae4ef9b4fb35e50efa164fbadfd7ddd875ed3c5371fdf58c5fb429c05349536b142b4fb20668141d59853d9f2b4d5fc91f42a5845422f3bc686862153ec9070336698b679a23b93b1025d5f9f8e1601d4cd7de99fc08daac4657b4bdd18c9e83a717cf9ab95caa6e0953fcc75dd0e9a09967173c4cf42857edba08e9ea813916bc8a63b09c11372cbd04bd32b5699f74a10361d1d3b02d04b717d39d139b2c6a1f51d21b1614942a54c9141cc8ba0bb59ead6504a055e18e0f37853c01af7abbe9c0d62ad90ed98ce04a0d1c0b5a0217335df2b36bace8c814ba1a13e2a3e00b6e149ec883e5ae4ec0f452c14bf7da1ecf2d4ed6bcf00bacc57f1991ec12560439d38d6734cc6cad9274a6c5775cd6e40b1d2b304d4ef1b8a8a41b017051282f09447ddfb8e04ee6e94ccb35321c9fe9257cadb6dff51a78afd4afb6f99be651874961f0b15c3d17d128917dbe8f9938b6aabfcfa54fe24c1cc71150f915bc2360b9d3ad194d69d6011eca29f8631d152021a69def86fa908498721acc1d4e4796799b1bdf052cec56d46680e61fad792167112f759035d05b3c10538dbb100114e8f6d254479b48daf37c1c3d77508083db642d4acb8eda01531f327778fb7ca79a822a1a70e53eb45183e007c4b560850b8315a0401cd772477dcd2a55fe369fb0085923bd259e89396762d565e9ca237e6b34fb68df89aa79ebe6ab8bd1709a9c2e327b96fd3646cc6f0a867aae84abf76b7338d2efef67d5f4ec32a6a6636b67c2af8a91738e5fb74eab2b0f61a2e7351f2763937fb88644b7992a282379018cbb4bce44d264456b2b25648264307f3f3cc3f64a0a3761acd5e510a6f04886af5eba048a5ddc636c82f128d7ed31109d0c45aa0ed9c88b2bde1e724cce32406fd4ac0504a45315c2389d682ce76d8a3bfef03ed2c19455b8eaa549ee22e4e3adcfab532ecc46f631360834edd95cd9f281f3db2ef4e19f8eb04ea8dbfaf79753751e8af43a982efd1b7d02601894e3bfd6ce1e43c7d2f9bd3b6e6141da72eae8bc1f26d86cdadc2f7a3336c9c9a03a0182db0950c1ddb55dd67bfe01d0091cf59a824890933352bf95b4a0b640701dffa1cf885c240c6ecc0871ba0036984481214581125ecf3975f1004735bdd9c15d1b2e5b735988487aca314e0c1acfb785fea30c12e240acd90603900447f3a75063783bd9f097e35ffc1838bb869e030ca6708f63f79cac08724d42e68afc65b1e0ab09f64305817f6df2425006f6768e7cc525f9f5c3155660113a1235f3aeee26b4a2207c5427c57932394e7d6eb7eb2cb04c7bea92bce736a834e327d98ea27d74fa357be80e0782301df1103916aca09a404405f60069b8a9b1c6f01b183df064a58485bf31a018e89a50a7ae0e7fdbb5d34a301da7603d228d0fbbfcd9fc1832af5ca9c816ed8208ef47cbdd8831d4d623a5989cd0327913f24f8154e48123e44ed76a948771f20d2c9b32e80a9f2abc3f6d9bd95ef2ac10366f60bbbac797c2859eead117b7421b55466c5d8ac9b73fec8111e3c2b0dd9f9738d73e4e23baf90cec9b8cb998bfb18e6274e190d582de0e380f3764536a8393e73f31956f80df427e525f71a0f5a5f4e84af66428616a3d7d84a2bccf2a9902a4f3ee2c96b5e058a4b17b08cdf08a395e8c37806a39f4f87484c2c053ebdeb49d7efdadf3ae23fb57b34c3f92cd464e252bad88ec5c82ff5812de5490f9aa070b2221d622f14ba91a0d9021de882bf580f8308aeceaf66849d79a816a3d801481be32ea0d70198894df85d691058610b0f39eaaa9a76b617ba29ff94df6b7f6c8a4a4d00a25af051886382b818022efed4619a7599fadd8896f9892a3eff46d453016a8e06e48ff0640949699600e5210e14ba460e6bd9af279c60191ea79e51fe6a75f0ca5c18fae5ec741982bdca06741f333e8a603899f20ee4c4f4c6068cfd291e132a40b3b33457e036cc52483c97f84b3b6b402f1a14e8cd463a13cdab2c20b537f57bddd9706cd1d870079a51d74ab732b39c2f23ae45e550ed0818e80523387e3e375cde90c6722bd6c23993b3c820a53643e87f3f45f55b1df0f2dd921915f69986678425d935dc2833cfb0e0298af53e817459ede23e781f0c23d2b73a71fb1a08d16e59eff60fb9c77cf92ef761d17bdbc9572279c6c0c393a6937898140271da2a1dc63b0a77b7d13a80601ba5170a466f40b0e87a2e42a32e9df085f5798be44315e48a138aa8b894515f43f96849641932f24e7f4d4bbed1d0d0dbb47bc92961a44ba90b4849ad9c0b1fd6fd934e3c966284b2ffabbac1d2b22bb257456cdf5daf434a7603e5c78fc9bb8dc310beee478d60da470af7cfb94e484234c4a793aa0db736643177ef683470f4cd50abe433eef7ac87dfa2797b17c5bc3ce2e2545ae8ec79ef714c05fe30362e3090ac2f1aedd2070bb8c40ff0ad96cd1f18a32a7bdd95266004a56d3f877cf86b9c0d3d5e3fde51a62885b85e0eefc2f2f653340bcf61ae6f0d80b2921c963f41259a699029aa85e534bd951154d909d6acc3ab91448bf672e3953886095e5126d9da91dfab3bbb841a026851fcb28d8dd43bc4e81029c2f652a0f20b2e210924c428e278e09f9c90b762ba00b0447de4c069e1ed673b5fa78fa5acc9e11abb764ef28f311bce3b4ddaa3c90a16556ce79fee3e9e1ed6176b17ade9b0a713b637f1404a67e4a8dc64a4f33cabe2db161bc9f54eeeab86aa43ed0becf0c752f28833307142d1aa275f82e90641669ef6f597bcb4ef29db6bc61a8d6c7fff2708eac7431afe5ce7c14ee4375282fb5944415ae15fd25f35c24dc80b0c3c8895e2088a68c24490c6627c9a1873186ba832305107db16ceaca02a2630101a25599705a6827267ba1556ff5c15a9aaa73fdead8f5ce74820e02ca1bbf6e738c51d09af1ce0ac1ac08a714180e4981618226447c0603225f5846197ac4dc21942264d82cc55a01ec5f2584b055ed4c4b268a2f44eccfa50c2c0959c4a7edfa33fb7a65f509c33391fe0f2107b235c4042892ecdf8292cad0756d8b305bbee497a31fa73f1d65d8f4ef74035adcacc77b12d193fc3d593504c6ebc571d6d978dfb26c48e552e1e81d0fa05f78fabedbdc193177e516c92258e8aa57f99207511514d8c8a33d4432773dcdb0770dc602eabb18e5e579690ba31976dd524abc71c3e792c64f03928ed33298ccd4597b44a74cadaa6a01e12d00bc72aa3e48980a799507582ec454bba0e7b247fdc9fab37efd18689e7faed5b4433f4c84b5213e9d0c5606f59be77c51a37ebd565bbe794df922c2242476c89bff6ea75f6fe241f93108e00450dbe71f4573a9a2d667bd0f9151933d5f0616f80746165cbc7f0e16ae1a9d88ea86d140b48a5ca49ef90248c399e43130c2d87c51653e5b5b3a955aea3b0089889f8d7e8c2dae2b56e1ddb0bf7cfdebfb6be6da901fda2e69fc5eaa8ba51dd58b64e73ffd90f63c9c77e47c2690b84f8471b85bd30a185ad3c65ced88d196670e0adbde3b9c88013522a9b66be251c78726251fd8b37e2b55a9d073251f97fae91fe85630e0c12c85147a9e75494e66a4f27d473ed6d69d922987bad77531de72150e47a3326ad8ceacae74680560d3f913465957a313f0d491faa5ef8cc4ddd02e94a431572d90f9de50f432506cb40b980d70aec75b3d061f8702ab19aa69b048bfd402263749e7a068fc7c540ef1820148d1ea47150ca4d7ec13a902abfc658581b74d763bd7b7562a821399f393575e09e0427ea51c13118553185d8ab33cf26fe023657d4da4dc9b18812eb7068cabffe6c4a6a873087775ff1498a8c245fc58450014d0301bb6488435baea0aa43071144856549e2996aae0f68c86c212b703b66bf512ca8f98cb848074b018fad8db514bc7cde3bf1ab94dd513226f2c5f1a1593dc0e5ad81d25e345b91bd5531f23ae41f6519705fdf42c0bbe2fa1478c0f8ce79d4fd05b6e06a1ec4f5a47a8946df6f2fa2bfce020c2c34d31a89d182c8a8326071b21b6d67bb5bed4713e47dcd2ad1a0ea9784d6ba13886f8a07046", 0xfce, 0x600000000000}, {&(0x7f0000000140), 0x0, 0x8000}, {&(0x7f0000000180)="2f8cc70a1781d45e4562c4e1aa16de172edf41069e49e134f6c15825ecaeb184342d8f66820364a97c", 0x29, 0x3}, {&(0x7f0000001640)="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", 0x196, 0x7}], 0x40881, &(0x7f00000001c0)='/usr/lib/telepathy/mission-control-5') vmsplice(r6, 0x0, 0x0, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) fallocate(r0, 0x2, 0xae, 0x0) r7 = syz_open_procfs(0x0, 0x0) r8 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_create(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7368656c6c5f657865635f743a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6e2d636f6e74726f6c2d352030303030303030303030d288b230303030303030323236202e2f66696c"], 0x64) ioctl$TIOCMGET(r7, 0x5415, 0x0) syz_open_dev$vcsa(0x0, 0x20, 0xdf8c4b28a379b948) socket$inet6(0xa, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r9 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 765.910510] net_ratelimit: 8 callbacks suppressed [ 765.910516] protocol 88fb is buggy, dev hsr_slave_0 [ 765.921291] protocol 88fb is buggy, dev hsr_slave_1 [ 766.070124] protocol 88fb is buggy, dev hsr_slave_0 [ 766.075246] protocol 88fb is buggy, dev hsr_slave_1 13:43:16 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffff0001, 0x91) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000680)={'syz1', "aa62e1de86f4ba15884a3e02a6334a3c8c811c9197e10034809b747b86a1d7fa0b2fac61df6de13b6c544bd4c6830a69659904d355c8b44f457596e771ad3dd5b261739bfdf98035e565e79534baa858204edbadd9a8958329edb302fdf4584072e51e68c39cba1b7ba3771ae72b68cd3585d5cf53f4726341a4fa1e475747cd3e82054914811fc093f3808e00f8996da03ed5781ebae906484bb3305694d05db6da56725440"}, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$KDENABIO(r4, 0x4b36) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000540)) unlink(&(0x7f0000000040)='./file0\x00') [ 766.550159] protocol 88fb is buggy, dev hsr_slave_0 [ 766.555393] protocol 88fb is buggy, dev hsr_slave_1 13:43:16 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3fe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) 13:43:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x12) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000003c0)={'veth0_to_hsr\x00', {0x2, 0x4e24, @local}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) pipe(&(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000043f6a9e358eaa828cba05c14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) io_setup(0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a13ed0c1201a6ccdd7f5450ade8680470000"], 0x1}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32], 0x2}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x101201, 0x0) [ 766.870398] protocol 88fb is buggy, dev hsr_slave_0 [ 766.876019] protocol 88fb is buggy, dev hsr_slave_1 [ 767.267911] audit: type=1800 audit(1574516597.131:198): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=17385 res=0 [ 767.490360] audit: type=1800 audit(1574516597.361:199): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="sda1" ino=17389 res=0 13:43:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x70bd25, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x3}}}}, 0x30}}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) setsockopt$inet_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x0, 0x80000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10d03, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x208) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f043051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108098da1924425181aa5", 0x0, 0x100}, 0x28) 13:43:17 executing program 0: r0 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0xff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 768.000235] protocol 88fb is buggy, dev hsr_slave_0 [ 768.005771] protocol 88fb is buggy, dev hsr_slave_1 [ 768.095813] audit: type=1804 audit(1574516597.961:200): pid=19629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir208302504/syzkaller.gJP1s4/449/bus" dev="sda1" ino=17371 res=1 [ 771.030464] net_ratelimit: 12 callbacks suppressed [ 771.035489] protocol 88fb is buggy, dev hsr_slave_0 [ 771.040594] protocol 88fb is buggy, dev hsr_slave_1 [ 772.150193] protocol 88fb is buggy, dev hsr_slave_0 [ 772.155429] protocol 88fb is buggy, dev hsr_slave_1 [ 772.310160] protocol 88fb is buggy, dev hsr_slave_0 [ 772.315235] protocol 88fb is buggy, dev hsr_slave_1 [ 772.790180] protocol 88fb is buggy, dev hsr_slave_0 [ 772.795411] protocol 88fb is buggy, dev hsr_slave_1 [ 773.110245] protocol 88fb is buggy, dev hsr_slave_0 [ 773.115439] protocol 88fb is buggy, dev hsr_slave_1 [ 776.310234] net_ratelimit: 8 callbacks suppressed [ 776.315172] protocol 88fb is buggy, dev hsr_slave_0 [ 776.320266] protocol 88fb is buggy, dev hsr_slave_1 [ 776.470184] protocol 88fb is buggy, dev hsr_slave_0 [ 776.475309] protocol 88fb is buggy, dev hsr_slave_1 [ 776.950221] protocol 88fb is buggy, dev hsr_slave_0 [ 776.955347] protocol 88fb is buggy, dev hsr_slave_1 [ 777.270217] protocol 88fb is buggy, dev hsr_slave_0 [ 777.275360] protocol 88fb is buggy, dev hsr_slave_1 [ 778.390221] protocol 88fb is buggy, dev hsr_slave_0 [ 778.395321] protocol 88fb is buggy, dev hsr_slave_1 [ 781.430204] net_ratelimit: 12 callbacks suppressed [ 781.435216] protocol 88fb is buggy, dev hsr_slave_0 [ 781.440306] protocol 88fb is buggy, dev hsr_slave_1 [ 782.550178] protocol 88fb is buggy, dev hsr_slave_0 [ 782.555328] protocol 88fb is buggy, dev hsr_slave_1 [ 782.710146] protocol 88fb is buggy, dev hsr_slave_0 [ 782.715270] protocol 88fb is buggy, dev hsr_slave_1 [ 783.190266] protocol 88fb is buggy, dev hsr_slave_0 [ 783.195399] protocol 88fb is buggy, dev hsr_slave_1 [ 783.510240] protocol 88fb is buggy, dev hsr_slave_0 [ 783.515388] protocol 88fb is buggy, dev hsr_slave_1 [ 786.710206] net_ratelimit: 8 callbacks suppressed [ 786.715125] protocol 88fb is buggy, dev hsr_slave_0 [ 786.720216] protocol 88fb is buggy, dev hsr_slave_1 [ 786.870161] protocol 88fb is buggy, dev hsr_slave_0 [ 786.875261] protocol 88fb is buggy, dev hsr_slave_1 [ 787.350254] protocol 88fb is buggy, dev hsr_slave_0 [ 787.355365] protocol 88fb is buggy, dev hsr_slave_1 [ 787.670203] protocol 88fb is buggy, dev hsr_slave_0 [ 787.675434] protocol 88fb is buggy, dev hsr_slave_1 [ 788.790195] protocol 88fb is buggy, dev hsr_slave_0 [ 788.795354] protocol 88fb is buggy, dev hsr_slave_1 [ 791.830209] net_ratelimit: 12 callbacks suppressed [ 791.835229] protocol 88fb is buggy, dev hsr_slave_0 [ 791.840422] protocol 88fb is buggy, dev hsr_slave_1 [ 792.950229] protocol 88fb is buggy, dev hsr_slave_0 [ 792.955357] protocol 88fb is buggy, dev hsr_slave_1 [ 793.110188] protocol 88fb is buggy, dev hsr_slave_0 [ 793.115351] protocol 88fb is buggy, dev hsr_slave_1 [ 793.590188] protocol 88fb is buggy, dev hsr_slave_0 [ 793.595308] protocol 88fb is buggy, dev hsr_slave_1 [ 793.910212] protocol 88fb is buggy, dev hsr_slave_0 [ 793.915363] protocol 88fb is buggy, dev hsr_slave_1 [ 797.110212] net_ratelimit: 8 callbacks suppressed [ 797.115240] protocol 88fb is buggy, dev hsr_slave_0 [ 797.120443] protocol 88fb is buggy, dev hsr_slave_1 [ 797.270199] protocol 88fb is buggy, dev hsr_slave_0 [ 797.275302] protocol 88fb is buggy, dev hsr_slave_1 [ 797.750195] protocol 88fb is buggy, dev hsr_slave_0 [ 797.755329] protocol 88fb is buggy, dev hsr_slave_1 [ 798.070248] protocol 88fb is buggy, dev hsr_slave_0 [ 798.075449] protocol 88fb is buggy, dev hsr_slave_1 [ 799.190247] protocol 88fb is buggy, dev hsr_slave_0 [ 799.195441] protocol 88fb is buggy, dev hsr_slave_1 [ 802.230144] net_ratelimit: 12 callbacks suppressed [ 802.230151] protocol 88fb is buggy, dev hsr_slave_0 [ 802.240595] protocol 88fb is buggy, dev hsr_slave_1 [ 803.350170] protocol 88fb is buggy, dev hsr_slave_0 [ 803.355298] protocol 88fb is buggy, dev hsr_slave_1 [ 803.510150] protocol 88fb is buggy, dev hsr_slave_0 [ 803.515245] protocol 88fb is buggy, dev hsr_slave_1 [ 803.990198] protocol 88fb is buggy, dev hsr_slave_0 [ 803.995305] protocol 88fb is buggy, dev hsr_slave_1 [ 804.310205] protocol 88fb is buggy, dev hsr_slave_0 [ 804.315450] protocol 88fb is buggy, dev hsr_slave_1 [ 807.510247] net_ratelimit: 8 callbacks suppressed [ 807.515236] protocol 88fb is buggy, dev hsr_slave_0 [ 807.520352] protocol 88fb is buggy, dev hsr_slave_1 [ 807.670234] protocol 88fb is buggy, dev hsr_slave_0 [ 807.677841] protocol 88fb is buggy, dev hsr_slave_1 [ 808.150279] protocol 88fb is buggy, dev hsr_slave_0 [ 808.155464] protocol 88fb is buggy, dev hsr_slave_1 [ 808.470210] protocol 88fb is buggy, dev hsr_slave_0 [ 808.475354] protocol 88fb is buggy, dev hsr_slave_1 [ 809.590172] protocol 88fb is buggy, dev hsr_slave_0 [ 809.595349] protocol 88fb is buggy, dev hsr_slave_1 [ 812.630239] net_ratelimit: 12 callbacks suppressed [ 812.635274] protocol 88fb is buggy, dev hsr_slave_0 [ 812.640428] protocol 88fb is buggy, dev hsr_slave_1 [ 813.750189] protocol 88fb is buggy, dev hsr_slave_0 [ 813.755375] protocol 88fb is buggy, dev hsr_slave_1 [ 813.910164] protocol 88fb is buggy, dev hsr_slave_0 [ 813.915251] protocol 88fb is buggy, dev hsr_slave_1 [ 814.390186] protocol 88fb is buggy, dev hsr_slave_0 [ 814.395349] protocol 88fb is buggy, dev hsr_slave_1 [ 814.710195] protocol 88fb is buggy, dev hsr_slave_0 [ 814.715336] protocol 88fb is buggy, dev hsr_slave_1 [ 817.910200] net_ratelimit: 8 callbacks suppressed [ 817.915398] protocol 88fb is buggy, dev hsr_slave_0 [ 817.920542] protocol 88fb is buggy, dev hsr_slave_1 [ 818.070166] protocol 88fb is buggy, dev hsr_slave_0 [ 818.075271] protocol 88fb is buggy, dev hsr_slave_1 [ 818.550198] protocol 88fb is buggy, dev hsr_slave_0 [ 818.555291] protocol 88fb is buggy, dev hsr_slave_1 [ 818.870254] protocol 88fb is buggy, dev hsr_slave_0 [ 818.875388] protocol 88fb is buggy, dev hsr_slave_1 [ 819.990180] protocol 88fb is buggy, dev hsr_slave_0 [ 819.995452] protocol 88fb is buggy, dev hsr_slave_1 [ 823.030239] net_ratelimit: 12 callbacks suppressed [ 823.035273] protocol 88fb is buggy, dev hsr_slave_0 [ 823.040390] protocol 88fb is buggy, dev hsr_slave_1 [ 824.150257] protocol 88fb is buggy, dev hsr_slave_0 [ 824.155521] protocol 88fb is buggy, dev hsr_slave_1 [ 824.310169] protocol 88fb is buggy, dev hsr_slave_0 [ 824.315312] protocol 88fb is buggy, dev hsr_slave_1 [ 1001.430329] INFO: task syz-executor.3:19540 blocked for more than 140 seconds. [ 1001.437867] Not tainted 4.14.155-syzkaller #0 [ 1001.443525] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.451568] syz-executor.3 D28064 19540 7126 0x00000004 [ 1001.457195] Call Trace: [ 1001.459782] __schedule+0x7b8/0x1cd0 [ 1001.463549] ? pci_mmcfg_check_reserved+0x150/0x150 [ 1001.468568] schedule+0x92/0x1c0 [ 1001.472021] schedule_timeout+0x93b/0xe10 [ 1001.476165] ? wait_for_completion+0x274/0x420 [ 1001.480817] ? find_held_lock+0x35/0x130 [ 1001.484956] ? usleep_range+0x130/0x130 [ 1001.488976] ? wait_for_completion+0x274/0x420 [ 1001.493664] ? _raw_spin_unlock_irq+0x28/0x90 [ 1001.498172] ? trace_hardirqs_on_caller+0x400/0x590 [ 1001.503262] wait_for_completion+0x27c/0x420 [ 1001.507679] ? wait_for_completion_interruptible+0x490/0x490 [ 1001.513603] ? wake_up_q+0xf0/0xf0 [ 1001.517165] flush_work+0x3eb/0x730 [ 1001.520870] ? insert_work+0x320/0x320 [ 1001.524765] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 1001.529875] ? __cancel_work_timer+0x166/0x480 [ 1001.534539] __cancel_work_timer+0x2f0/0x480 [ 1001.538965] ? cancel_delayed_work+0x20/0x20 [ 1001.543458] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1001.548570] ? trace_hardirqs_on_caller+0x400/0x590 [ 1001.553675] cancel_work_sync+0x18/0x20 [ 1001.557730] p9_fd_close+0x2ae/0x450 [ 1001.561517] p9_client_create+0x787/0x1120 [ 1001.565770] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 1001.572098] ? __kmalloc_track_caller+0x372/0x790 [ 1001.577098] ? __lockdep_init_map+0x10c/0x570 [ 1001.581673] ? lockdep_init_map+0x9/0x10 [ 1001.585776] ? __raw_spin_lock_init+0x2d/0x100 [ 1001.590466] v9fs_session_init+0x1dc/0x1620 [ 1001.594810] ? check_preemption_disabled+0x3c/0x250 [ 1001.599820] ? v9fs_show_options+0x730/0x730 [ 1001.604324] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1001.609785] ? v9fs_mount+0x5e/0x870 [ 1001.613573] ? rcu_read_lock_sched_held+0x110/0x130 [ 1001.618612] ? kmem_cache_alloc_trace+0x623/0x790 [ 1001.623529] ? free_pages+0x46/0x50 [ 1001.627171] v9fs_mount+0x7d/0x870 [ 1001.630799] mount_fs+0x97/0x2a1 [ 1001.634176] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1001.638663] do_mount+0x417/0x27d0 [ 1001.642281] ? retint_kernel+0x2d/0x2d [ 1001.646169] ? copy_mount_string+0x40/0x40 [ 1001.650484] ? copy_mount_options+0x199/0x2f0 [ 1001.654976] ? copy_mount_options+0x1fe/0x2f0 [ 1001.659460] SyS_mount+0xab/0x120 [ 1001.662971] ? copy_mnt_ns+0x8c0/0x8c0 [ 1001.666871] do_syscall_64+0x1e8/0x640 [ 1001.670861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1001.675712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.680964] RIP: 0033:0x45a639 [ 1001.684174] RSP: 002b:00007f816eb41c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1001.691981] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a639 [ 1001.699270] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1001.707221] RBP: 000000000075bfc8 R08: 0000000020000080 R09: 0000000000000000 [ 1001.714556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f816eb426d4 [ 1001.721966] R13: 00000000004c7170 R14: 00000000004dcbe0 R15: 00000000ffffffff [ 1001.729279] [ 1001.729279] Showing all locks held in the system: [ 1001.735682] 1 lock held by khungtaskd/1018: [ 1001.740370] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1001.749463] 1 lock held by rsyslogd/6956: [ 1001.753696] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 1001.762002] 2 locks held by getty/7079: [ 1001.765980] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.774741] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.784118] 2 locks held by getty/7080: [ 1001.788075] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.796826] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.806785] 2 locks held by getty/7081: [ 1001.810815] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.819501] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.828862] 2 locks held by getty/7082: [ 1001.833181] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.841953] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.851323] 2 locks held by getty/7083: [ 1001.855287] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.864021] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.873368] 2 locks held by getty/7084: [ 1001.877323] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.886052] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.895440] 2 locks held by getty/7085: [ 1001.899396] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.908143] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 1001.917570] 2 locks held by kworker/0:2/7136: [ 1001.922138] #0: ("events"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 1001.930642] #1: ((&m->wq)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 1001.939114] [ 1001.940787] ============================================= [ 1001.940787] [ 1001.947848] NMI backtrace for cpu 0 [ 1001.951650] CPU: 0 PID: 1018 Comm: khungtaskd Not tainted 4.14.155-syzkaller #0 [ 1001.959230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.968667] Call Trace: [ 1001.971252] dump_stack+0x142/0x197 [ 1001.974873] nmi_cpu_backtrace.cold+0x57/0x94 [ 1001.979475] ? irq_force_complete_move.cold+0x7d/0x7d [ 1001.984645] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1001.989944] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1001.995124] watchdog+0x5e7/0xb90 [ 1001.998611] kthread+0x319/0x430 [ 1002.001968] ? hungtask_pm_notify+0x50/0x50 [ 1002.006268] ? kthread_create_on_node+0xd0/0xd0 [ 1002.010931] ret_from_fork+0x24/0x30 [ 1002.014851] Sending NMI from CPU 0 to CPUs 1: [ 1002.019654] NMI backtrace for cpu 1 [ 1002.019658] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.155-syzkaller #0 [ 1002.019661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.019664] task: ffff8880a9d1c340 task.stack: ffff8880a9d28000 [ 1002.019666] RIP: 0010:lock_acquire+0x273/0x430 [ 1002.019668] RSP: 0018:ffff8880a9d2fc50 EFLAGS: 00000046 [ 1002.019673] RAX: dffffc0000000000 RBX: ffff8880a4ed1110 RCX: ffff8880a4ed1110 [ 1002.019676] RDX: 1ffff110149da222 RSI: 0000000000000000 RDI: ffff8880a9d1cbbc [ 1002.019678] RBP: ffff8880a9d2fc98 R08: 0000000000000001 R09: 0000000000000000 [ 1002.019681] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8779f708 [ 1002.019684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 1002.019687] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 1002.019689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.019692] CR2: 000000c42049c000 CR3: 0000000077e65000 CR4: 00000000001426e0 [ 1002.019694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1002.019697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1002.019699] Call Trace: [ 1002.019700] ktime_get+0xc6/0x2c0 [ 1002.019702] ? clockevents_program_event+0x122/0x2f0 [ 1002.019705] clockevents_program_event+0x122/0x2f0 [ 1002.019707] tick_program_event+0x83/0xe0 [ 1002.019709] hrtimer_force_reprogram+0x20b/0x280 [ 1002.019710] __remove_hrtimer+0x148/0x180 [ 1002.019712] hrtimer_try_to_cancel+0x219/0x530 [ 1002.019715] ? __hrtimer_run_queues+0xbc0/0xbc0 [ 1002.019717] ? check_preemption_disabled+0x3c/0x250 [ 1002.019719] hrtimer_cancel+0x22/0x40 [ 1002.019721] tick_nohz_idle_exit+0x2eb/0x6e0 [ 1002.019723] ? trace_hardirqs_on+0xd/0x10 [ 1002.019725] do_idle+0x11b/0x3d0 [ 1002.019727] cpu_startup_entry+0x1b/0x20 [ 1002.019729] start_secondary+0x346/0x4b0 [ 1002.019731] secondary_startup_64+0xa5/0xb0 [ 1002.019732] Code: 36 d9 06 00 0f 84 36 01 00 00 48 85 c9 0f 84 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 cb 48 c1 ea 03 80 3c 02 00 <0f> 85 95 01 00 00 48 8b 01 44 89 5d c0 48 8d 7b 08 48 be 00 00 [ 1002.020423] Kernel panic - not syncing: hung_task: blocked tasks [ 1002.225165] CPU: 0 PID: 1018 Comm: khungtaskd Not tainted 4.14.155-syzkaller #0 [ 1002.232659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.245224] Call Trace: [ 1002.247815] dump_stack+0x142/0x197 [ 1002.251429] panic+0x1f9/0x42d [ 1002.254602] ? add_taint.cold+0x16/0x16 [ 1002.258594] ? ___preempt_schedule+0x16/0x18 [ 1002.263005] watchdog+0x5f8/0xb90 [ 1002.266455] kthread+0x319/0x430 [ 1002.269831] ? hungtask_pm_notify+0x50/0x50 [ 1002.274144] ? kthread_create_on_node+0xd0/0xd0 [ 1002.278811] ret_from_fork+0x24/0x30 [ 1002.284325] Kernel Offset: disabled [ 1002.287960] Rebooting in 86400 seconds..