[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. 2020/04/17 14:25:35 fuzzer started 2020/04/17 14:25:36 dialing manager at 10.128.0.105:37921 syzkaller login: [ 43.926605][ T6717] ld (6717) used greatest stack depth: 10440 bytes left 2020/04/17 14:25:36 syscalls: 2960 2020/04/17 14:25:36 code coverage: enabled 2020/04/17 14:25:36 comparison tracing: enabled 2020/04/17 14:25:36 extra coverage: enabled 2020/04/17 14:25:36 setuid sandbox: enabled 2020/04/17 14:25:36 namespace sandbox: enabled 2020/04/17 14:25:36 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/17 14:25:36 fault injection: enabled 2020/04/17 14:25:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/17 14:25:36 net packet injection: enabled 2020/04/17 14:25:36 net device setup: enabled 2020/04/17 14:25:36 concurrency sanitizer: enabled 2020/04/17 14:25:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/17 14:25:36 USB emulation: /dev/raw-gadget does not exist [ 47.297896][ T6722] KCSAN: could not find function: '_find_next_bit' 2020/04/17 14:25:41 adding functions to KCSAN blacklist: 'echo_char' 'do_syslog' 'blk_mq_get_request' 'kauditd_thread' 'n_tty_receive_buf_common' 'ext4_free_inodes_count' '__ext4_new_inode' 'tick_nohz_idle_stop_tick' 'do_exit' 'copy_process' 'generic_fillattr' 'do_nanosleep' 'blk_mq_sched_dispatch_requests' 'audit_log_start' 'alloc_pid' 'timer_clear_idle' 'attach_to_pi_owner' 'blk_mq_dispatch_rq_list' 'ktime_get_real_seconds' '__skb_wait_for_more_packets' 'generic_write_end' 'mod_timer' 'dd_has_work' 'ext4_mb_good_group' 'tick_sched_do_timer' 'commit_echoes' '_find_next_bit' 'xas_clear_mark' 'add_timer' 'ep_poll' 'ext4_mark_iloc_dirty' '__snd_rawmidi_transmit_ack' 'shmem_getpage_gfp' '__add_to_page_cache_locked' 'shmem_file_read_iter' 'page_counter_charge' 'wbt_done' 'vm_area_dup' 'tick_nohz_next_event' 'run_timer_softirq' 'pcpu_alloc' 'io_sq_thread' 'find_get_pages_range_tag' 'ktime_get_ts64' 14:28:56 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 244.445025][ T6725] IPVS: ftp: loaded support on port[0] = 21 14:28:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r2, r4, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) dup2(r1, r5) [ 244.526600][ T6725] chnl_net:caif_netlink_parms(): no params data found [ 244.667490][ T6839] IPVS: ftp: loaded support on port[0] = 21 [ 244.725603][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.749235][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.756876][ T6725] device bridge_slave_0 entered promiscuous mode [ 244.784868][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.792513][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.801162][ T6725] device bridge_slave_1 entered promiscuous mode [ 244.816983][ T6839] chnl_net:caif_netlink_parms(): no params data found 14:28:57 executing program 2: getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000001c0)="3f7a280d6587faaa8b541a1ef7d453f9d8bc89", 0x13}, {&(0x7f0000000200)="78ae7e2642619c", 0x7}, {&(0x7f0000000240)="0a619494ece5393350381ba6202a9148a7099b7128a313f20590cdce51828aea8d1921188a3bad6fd30618d6f53181370c49ee8033cce4318b8cc1b431da451a8f60c1e49b4a4c26ca2919415f50acf26d3353e3a7c3", 0x56}, {&(0x7f0000000480)="26928997f7574f42e7f10b331aca5ea360e843eab00caa8bef9c603f92831a4a9c32b91333c9db7e955cd99dc1472289284f384953aea1d40cf38c2b562f24bd71253b7957c5dbc5de26f6c1b11eec305e60a34be7edff932bbce571cc1fd8a95ed9840d9ec52757eba290f66363bbaf09f4dc6d3ebeb1019011533e93285de279aacc4b13a1aa5c7b23128e06ee8c19bd3b983aed9171624fca2b", 0x9b}, {&(0x7f0000000540)="787cea6d3a3b8025f3918cc63234b84d5a3cc9d296c1b4ef60a6d7763c9322eaa96c3643039b0e83f885100c3229502347faae9638c1f784aadc62d733bd773067d8ecaed7ddcf861cc302c76533e1a424a3186cc96b6bff084f2a74dac364dc12e7af04cc8c5680419488bda1479397a279deded3442307f9b3defd1431f223fcc5f7f41ac93888f3fa6b0ac4344b649dd9d8372ea0650649eb7dd929a4d649df", 0xa1}, {0x0}], 0x6}, 0x20010000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup3(r1, r5, 0x0) dup2(r0, r6) [ 244.843447][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.854835][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.912545][ T6725] team0: Port device team_slave_0 added [ 244.939424][ T6725] team0: Port device team_slave_1 added [ 244.955389][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.969214][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.976744][ T6839] device bridge_slave_0 entered promiscuous mode [ 245.010191][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.017277][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.040136][ T6839] device bridge_slave_1 entered promiscuous mode [ 245.047046][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.056370][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.082863][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.104146][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.115443][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.118993][ T6997] IPVS: ftp: loaded support on port[0] = 21 [ 245.123855][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 14:28:57 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0xe0380000}, 0x10) [ 245.154489][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.166951][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.204960][ T6839] team0: Port device team_slave_0 added [ 245.261093][ T6725] device hsr_slave_0 entered promiscuous mode [ 245.289341][ T6725] device hsr_slave_1 entered promiscuous mode [ 245.343188][ T6839] team0: Port device team_slave_1 added [ 245.374630][ T7047] IPVS: ftp: loaded support on port[0] = 21 [ 245.394049][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.401286][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.428354][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.442619][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.449681][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.475821][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:28:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 245.555612][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 245.602200][ T6839] device hsr_slave_0 entered promiscuous mode [ 245.659282][ T6839] device hsr_slave_1 entered promiscuous mode [ 245.689042][ T6839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.696612][ T6839] Cannot create hsr debugfs directory [ 245.724176][ T7180] IPVS: ftp: loaded support on port[0] = 21 14:28:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) dup3(r3, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r2, r5, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) dup2(r1, r6) [ 245.831579][ T6725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.881805][ T6725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.901478][ T6725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.961153][ T6725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.028489][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.035981][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.044260][ T6997] device bridge_slave_0 entered promiscuous mode [ 246.054770][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.061942][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.069938][ T6997] device bridge_slave_1 entered promiscuous mode [ 246.093513][ T7286] IPVS: ftp: loaded support on port[0] = 21 [ 246.143573][ T7047] chnl_net:caif_netlink_parms(): no params data found [ 246.161440][ T6839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.192363][ T6839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.261729][ T6839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.322025][ T6839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.384072][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.396252][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 246.424156][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.501336][ T6997] team0: Port device team_slave_0 added [ 246.529740][ T6997] team0: Port device team_slave_1 added [ 246.563862][ T7286] chnl_net:caif_netlink_parms(): no params data found [ 246.575556][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.596579][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.604534][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.631057][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.645233][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.652598][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.679229][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.760391][ T6997] device hsr_slave_0 entered promiscuous mode [ 246.829090][ T6997] device hsr_slave_1 entered promiscuous mode [ 246.868986][ T6997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.876580][ T6997] Cannot create hsr debugfs directory [ 246.886272][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.893420][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.901590][ T7047] device bridge_slave_0 entered promiscuous mode [ 246.911007][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.918110][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.926539][ T7047] device bridge_slave_1 entered promiscuous mode [ 246.935558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.945579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.956887][ T6725] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.966230][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.973473][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.981473][ T7180] device bridge_slave_0 entered promiscuous mode [ 246.990838][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.997864][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.007916][ T7180] device bridge_slave_1 entered promiscuous mode [ 247.038407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.046938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.055850][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.062892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.071039][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.079779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.088140][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.095207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.110086][ T7047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.121831][ T7047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.144270][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.154293][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.163428][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.179993][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.192583][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.220004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.229445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.238021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.247233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.262777][ T7047] team0: Port device team_slave_0 added [ 247.276555][ T7047] team0: Port device team_slave_1 added [ 247.284470][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.293284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.310980][ T7180] team0: Port device team_slave_0 added [ 247.331365][ T6725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.342942][ T6725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.354913][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.364686][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.374270][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.384089][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.393358][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.402903][ T7180] team0: Port device team_slave_1 added [ 247.427499][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.435701][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.462215][ T7047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.474572][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.482048][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.508268][ T7047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.520390][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.528344][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.538462][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.546612][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.555761][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.563596][ T7286] device bridge_slave_0 entered promiscuous mode [ 247.572262][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.579735][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.587230][ T7286] device bridge_slave_1 entered promiscuous mode [ 247.598608][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.605997][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.632418][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.645090][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.652126][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.678187][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.716324][ T6997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.767506][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.776553][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.820997][ T7047] device hsr_slave_0 entered promiscuous mode [ 247.869131][ T7047] device hsr_slave_1 entered promiscuous mode [ 247.938831][ T7047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.946393][ T7047] Cannot create hsr debugfs directory [ 247.952526][ T6997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.014177][ T6997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.072625][ T6997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.130876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.140311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.148581][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.155661][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.163454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.171188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.179086][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.187596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.196013][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.203084][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.210977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.221379][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.290790][ T7180] device hsr_slave_0 entered promiscuous mode [ 248.339407][ T7180] device hsr_slave_1 entered promiscuous mode [ 248.398735][ T7180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.406328][ T7180] Cannot create hsr debugfs directory [ 248.429756][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.437844][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.447306][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.456001][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.465055][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.473650][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.491349][ T7286] team0: Port device team_slave_0 added [ 248.499884][ T7286] team0: Port device team_slave_1 added [ 248.520081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.545712][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.553027][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.579758][ T7286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.594189][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.601681][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.628234][ T7286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.649164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.657382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.673064][ T6839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.684097][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.730714][ T7286] device hsr_slave_0 entered promiscuous mode [ 248.779036][ T7286] device hsr_slave_1 entered promiscuous mode [ 248.838692][ T7286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.846262][ T7286] Cannot create hsr debugfs directory [ 248.852384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.861456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.869969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.878471][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.952026][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.962627][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.976829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.985127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.006488][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.016219][ T6725] device veth0_vlan entered promiscuous mode [ 249.024351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.032056][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.049421][ T7180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.091256][ T7180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.120853][ T7180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.164264][ T7180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.234668][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.253506][ T6725] device veth1_vlan entered promiscuous mode [ 249.269510][ T7047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.290133][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.297704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.313483][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.324167][ T7047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.371933][ T7047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.432461][ T7047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.498696][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.507240][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.516866][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.523927][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.553964][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.561805][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.573289][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.582612][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.589668][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.597732][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.606674][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.615234][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.632273][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.641349][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.650146][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.659210][ T7286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.711050][ T7286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.752240][ T7286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.805576][ T6725] device veth0_macvtap entered promiscuous mode [ 249.816568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.825554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.834372][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.843390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.851935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.860480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.868775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.877018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.885345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.893740][ T7286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.968990][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.982503][ T6725] device veth1_macvtap entered promiscuous mode [ 249.990200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.998183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.013528][ T6839] device veth0_vlan entered promiscuous mode [ 250.037410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.045988][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.057020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.064957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.081069][ T6839] device veth1_vlan entered promiscuous mode [ 250.110562][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.120935][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.129030][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.137110][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.147987][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.156762][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.166220][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.183108][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.195680][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.204637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.214461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.227760][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.238102][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.257044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.266466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.288687][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.296422][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.312452][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.326776][ T6839] device veth0_macvtap entered promiscuous mode [ 250.340343][ T7047] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.348708][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.356579][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.364810][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.384235][ T6839] device veth1_macvtap entered promiscuous mode [ 250.403795][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.412488][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.420826][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.427978][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.435761][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.444431][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.453013][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.462572][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.470977][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.477986][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.485943][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.494620][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.503207][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.510296][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.518038][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.526751][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.535145][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.542212][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.571753][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.580204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.588111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.597527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.613524][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.627886][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.639309][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.650592][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.676079][ T6997] device veth0_vlan entered promiscuous mode [ 250.685549][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.695074][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.705717][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.714680][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.723479][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.732560][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.741180][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.749998][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.758984][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.767562][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.776435][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.785262][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.794051][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.802568][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.811176][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.818967][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.826835][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.834968][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.842947][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.851398][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.863728][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.878469][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.886875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.896264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.904735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.917458][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.930289][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.941685][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.954775][ T6997] device veth1_vlan entered promiscuous mode [ 250.964116][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.972356][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.981123][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.989403][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.998044][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.006877][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.015624][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.024393][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.031492][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.040529][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.051863][ T7180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.082148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.093700][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.102499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.111236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.119846][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.126851][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.152305][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.175677][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.184547][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.194206][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.204114][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.212956][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.221830][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.229562][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.263193][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.274216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.287600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.302794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.311693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.320181][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.328304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.337307][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.346001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.354785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.363808][ T6997] device veth0_macvtap entered promiscuous mode [ 251.374123][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.400527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.418459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.425939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.438040][ T6997] device veth1_macvtap entered promiscuous mode [ 251.454256][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.462648][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.484668][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.497695][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.512431][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.523892][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.540568][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.551951][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.563253][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.575563][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.586639][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.597256][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.609004][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.620775][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.643779][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.659015][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.667636][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.685693][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.695221][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.704299][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.732990][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.742043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.763460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 14:29:04 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) recvmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/139, 0x8b}, {0x0}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000}}, {{&(0x7f0000001d40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)=""/72, 0x48}, {&(0x7f0000001e40)=""/151, 0x97}, {&(0x7f0000001f00)=""/159, 0x9f}], 0x3, &(0x7f0000002000)=""/67, 0x43}, 0x5}, {{&(0x7f0000002080)=@pptp, 0x80, &(0x7f0000002340)=[{&(0x7f0000002100)=""/248, 0xf8}, {&(0x7f0000002200)=""/208, 0xd0}], 0x2, &(0x7f0000002380)=""/220, 0xdc}, 0xfff}, {{&(0x7f0000002480)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002500)=""/154, 0x9a}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2}, 0x3}, {{&(0x7f0000003700)=@alg, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/34, 0x22}], 0x1, &(0x7f0000003800)=""/204, 0xcc}, 0x4}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003980)=""/178, 0xb2}, {&(0x7f0000003a40)=""/115, 0x73}, {&(0x7f0000003ac0)=""/180, 0xb4}], 0x3, &(0x7f0000003bc0)=""/194, 0xc2}, 0x9}], 0x6, 0x10000, &(0x7f0000003e40)={0x0, 0x989680}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x0, 0x8, 0xd6, 0x7f, 0x0, 0x0, 0x0, 0x25f, 0x40, 0x0, 0x9}, [{0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0xa1cb}], "e5b87a363e0a3dde6f0690ec44", [[], [], [], []]}, 0x485) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc400, 0x0) chroot(0x0) fcntl$addseals(r0, 0x409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) exit(0xa0030000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$char_usb(r2, &(0x7f0000003e80)="2a989360f2b2f1767dfb7e68ec1fc8b2b856fe1a8a89b465f2a9866e7a742fe3ddd275bc74fccf3d756398d34e6f26c2abd40065e7970473e8ae6558e4215d76419fb162663fcbec1fb8441f5a088bfaf24930cc2b1d84d6464dac8010cbfa1db7ea52d25e58d51219e390c16e2466f9a9f1a0", 0x73) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x321c42, 0x0) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80800) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x100636, 0x4) [ 251.777391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.800462][ T7180] device veth0_vlan entered promiscuous mode [ 251.834867][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.847345][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.863062][ T7180] device veth1_vlan entered promiscuous mode [ 251.886605][ T7047] device veth0_vlan entered promiscuous mode [ 251.897495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.907861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.917636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.927468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.935836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.945081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.953207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.976642][ T7047] device veth1_vlan entered promiscuous mode 14:29:04 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write(0xffffffffffffffff, 0x0, 0x0) [ 252.020891][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.039353][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.047349][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.060071][ T26] audit: type=1804 audit(1587133744.683:2): pid=8025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/2/bus" dev="sda1" ino=15751 res=1 [ 252.093966][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.114144][ T7286] device veth0_vlan entered promiscuous mode [ 252.129599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.141559][ T26] audit: type=1804 audit(1587133744.683:3): pid=8025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/2/bus" dev="sda1" ino=15751 res=1 [ 252.164301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.179810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.218774][ T7180] device veth0_macvtap entered promiscuous mode [ 252.251569][ T7286] device veth1_vlan entered promiscuous mode [ 252.261296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.273907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.302398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.346734][ T26] audit: type=1804 audit(1587133744.963:4): pid=8028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/2/bus" dev="sda1" ino=15751 res=1 [ 252.382555][ T7180] device veth1_macvtap entered promiscuous mode [ 252.400049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.408045][ T26] audit: type=1804 audit(1587133744.963:5): pid=8028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/2/bus" dev="sda1" ino=15751 res=1 [ 252.414951][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 14:29:05 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) write(0xffffffffffffffff, 0x0, 0x0) [ 252.438558][ T8027] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.463425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.475398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.492975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.532102][ T7047] device veth0_macvtap entered promiscuous mode [ 252.575750][ T7047] device veth1_macvtap entered promiscuous mode [ 252.596938][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.612076][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.623216][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.634368][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.644817][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.667271][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.683617][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.704216][ T7286] device veth0_macvtap entered promiscuous mode [ 252.713632][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.723394][ T26] audit: type=1804 audit(1587133745.343:6): pid=8050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/3/bus" dev="sda1" ino=15751 res=1 [ 252.758912][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 14:29:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dc", 0x47}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="007fff9f"], 0x4}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 252.772883][ T26] audit: type=1804 audit(1587133745.373:7): pid=8050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/3/bus" dev="sda1" ino=15751 res=1 [ 252.779063][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.859180][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.867535][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.903980][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.922330][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.938881][ T8060] ptrace attach of "/root/syz-executor.1"[8058] was attempted by "/root/syz-executor.1"[8060] 14:29:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x6008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) [ 252.956203][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.992262][ T8064] ip6t_REJECT: TCP_RESET illegal for non-tcp 14:29:05 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) recvmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001d40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)=""/72, 0x48}, {&(0x7f0000001e40)=""/151, 0x97}, {&(0x7f0000001f00)=""/159, 0x9f}], 0x3, &(0x7f0000002000)=""/67, 0x43}, 0x5}, {{&(0x7f0000002080)=@pptp, 0x80, &(0x7f0000002340)=[{&(0x7f0000002100)=""/248, 0xf8}, {&(0x7f0000002200)=""/208, 0xd0}, {&(0x7f0000002300)=""/36, 0x24}], 0x3, &(0x7f0000002380)=""/220, 0xdc}, 0xfff}, {{&(0x7f0000002480)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002500)=""/154, 0x9a}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2}, 0x3}, {{&(0x7f0000003700)=@alg, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/34, 0x22}], 0x1, &(0x7f0000003800)=""/204, 0xcc}, 0x4}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003980)=""/178, 0xb2}, {&(0x7f0000003a40)=""/115, 0x73}, {&(0x7f0000003ac0)=""/180, 0xb4}], 0x3, &(0x7f0000003bc0)=""/194, 0xc2}, 0x9}], 0x6, 0x10000, &(0x7f0000003e40)={0x0, 0x989680}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x0, 0x8, 0xd6, 0x7f, 0x0, 0x0, 0x0, 0x25f, 0x40, 0x0, 0x9, 0x0, 0x38, 0x1, 0x0, 0x0, 0xd02}, [{0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0xa1cb}], "e5b87a363e0a3dde6f0690ec44", [[], [], [], []]}, 0x485) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc400, 0x0) chroot(0x0) fcntl$addseals(r0, 0x409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x1302000, 0x4) exit(0xa0030000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) write$char_usb(r2, &(0x7f0000003e80)="2a989360f2b2f1767dfb7e68ec1fc8b2b856fe1a8a89b465f2a9866e7a742fe3ddd275bc74fccf3d756398d34e6f26c2abd40065e7970473e8ae6558e4215d76419fb162663fcbec1fb8441f5a088bfaf24930cc2b1d84d6464dac8010cbfa1db7ea52d25e58d51219e390c16e2466f9a9f1a0", 0x73) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x321c42, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x7fffffff]}, 0x8, 0x80800) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x100636, 0x4) [ 253.007913][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.026539][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.037487][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.054767][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.073243][ T7286] device veth1_macvtap entered promiscuous mode [ 253.088359][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.096632][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 14:29:05 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x200, 0x220, 0x220, 0x200, 0x220, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'ip6gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x7, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000000)=""/87) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) [ 253.122566][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.133289][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.145754][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.156735][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.170073][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.182832][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.193157][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.203967][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.214101][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.224784][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.247742][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.276505][ C1] hrtimer: interrupt took 24957 ns [ 253.299729][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.316320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 14:29:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) [ 253.347739][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.363963][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.397362][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.410789][ T8086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.415332][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.432181][ T8090] mmap: syz-executor.1 (8090) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 253.445068][ T8086] xt_CT: You must specify a L4 protocol and not use inversions on it 14:29:06 executing program 2: getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r2, 0xffffffffffffffff, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000001c0)="3f7a280d6587faaa8b541a1ef7d453f9d8bc89", 0x13}, {&(0x7f0000000200)="78ae7e2642619c", 0x7}, {&(0x7f0000000240)="0a619494ece5393350381ba6202a9148a7099b7128a313f20590cdce51828aea8d1921188a3bad6fd30618d6f53181370c49ee8033cce4318b8cc1b431da451a8f60c1e49b4a4c26ca2919415f50acf26d3353e3a7c3", 0x56}, {&(0x7f0000000480)="26928997f7574f42e7f10b331aca5ea360e843eab00caa8bef9c603f92831a4a9c32b91333c9db7e955cd99dc1472289284f384953aea1d40cf38c2b562f24bd71253b7957c5dbc5de26f6c1b11eec305e60a34be7edff932bbce571cc1fd8a95ed9840d9ec52757eba290f66363bbaf09f4dc6d3ebeb1019011533e93285de279aacc4b13a1aa5c7b23128e06ee8c19bd3b983aed9171624fca2b", 0x9b}, {&(0x7f0000000540)="787cea6d3a3b8025f3918cc63234b84d5a3cc9d296c1b4ef60a6d7763c9322eaa96c3643039b0e83f885100c3229502347faae9638c1f784aadc62d733bd773067d8ecaed7ddcf861cc302c76533e1a424a3186cc96b6bff084f2a74dac364dc12e7af04cc8c5680419488bda1479397a279deded3442307f9b3defd1431f223fcc5f7f41ac93888f3fa6b0ac4344b649dd9d8372ea0650649eb7dd929a4d649df", 0xa1}, {0x0}], 0x6}, 0x20010000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup3(r1, r5, 0x0) dup2(r0, r6) [ 253.480696][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.508145][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.517984][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.560364][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.588128][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.602555][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.617908][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.637120][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.649621][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.680377][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.700848][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.731070][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.748341][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.759341][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.769980][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.781334][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.796791][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.806398][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.821530][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.838924][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.854925][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.866685][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.880884][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.893071][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.906748][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.920031][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.930968][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.944041][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.981796][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.996073][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.010640][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.036972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.053316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.324585][ T8156] kvm: emulating exchange as write 14:29:07 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xffffffffffff8001}, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669", 0x2}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x15f, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) r8 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC]) [ 254.590185][ T8177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:29:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:07 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000001a00030b1dfffd946f6105000200000a1f000003141008000800270012000000", 0x24}], 0x1}, 0x0) 14:29:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7f0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) r0 = dup(0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x604c2, 0x10f) write$P9_RREADLINK(r1, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/178, 0xb2}], 0x9) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3220c, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @private}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @empty}, 0x141, 0x0, 0x2, 0x46a, 0xfffd, 0x0, 0x6, 0x4000000000000000}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x0, &(0x7f0000000180)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x2) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) 14:29:07 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xffffffffffff8001}, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669", 0x2}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x15f, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) r8 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC]) 14:29:07 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xffffffffffff8001}, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669", 0x2}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x15f, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) r8 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="66647d8532b5adca72885e20265b56164fdac68de6fd46112acb8216c26d2f25557d6107c5e06bd06e9a7917897d75a28890cfa6a1b8796660c5bc046094ba2906e31b9ba599aaee1ad3fa78e18fafc4ef7cfc5ca4d15a69c0d0073cdf27e5a603eb3d5e3aa31c4199d2909e4ec05e184b9bea2cd66b74f0a559f35ed8aee69a4d209daedbe0b51993ac6df8c09a765f5479f045b71407884780d9eb0c0892554609a2f3578b8b935a2be50f11eaa2f653547e5c9b91bbbb6f59eb1ed396fd389dfe040000006df04e785c7225363d97aca8014d49cadedc431b1115ba4e382ff18074aecd00000000000000000000000000001f47fa1c3e21b725d2f499c04cefa92ecdf6d438409c945e849bf3dc22fb6af1405695ee0a91c3747b4e57fe3b2d5489b28f5feaed39b228cdd580c9e71f73695701155bbde478ebbdd935de1e6d809de1e8911237378d2232ba2160e16926febadb7dbccc60071190cde61362a843dd33efa7f158d1e7f970f77dfb53e984098980d83e32fcfcb8fa87c5b6f63f9423d95ce9a9442fdce178a66894ed6049cefa83765ed7833c92212f4aae6ae8813952c39c13eef17cb2ce04196aacf739e05115fb3982e11be79185328f7e7c0293fa1d2824c46e9d0496015c584b588a0f83d78b49bceae5cc84e805197e3693f65ea02c1759ae", @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC]) 14:29:07 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000001a00030b1dfffd946f6105000200000a1f000003141008000800270012000000", 0x24}], 0x1}, 0x0) [ 255.278727][ T8202] IPVS: ftp: loaded support on port[0] = 21 [ 255.348988][ T8222] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:29:08 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xffffffffffff8001}, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669", 0x2}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x15f, 0x4) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x1, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r7, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) r8 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYBLOB="13ac6f7773a5be231fbece410075705f69643dc2a407fea20d4d9718364a40f3703d9363c3193393ec196b014484c92fed3cacaffba8f13e297737c6d214d90bfd731bc0c4f15cfc507579f159448a44dd0617c5a0d1e465b03ba5effb1e59a3efda3ed4b1c9ae9da38484cc5d4fc81fb18d142fc39697ef539d92413c825525ca095f12bd93838865832fac06fe1d4c0a238dd32e517b0437b38dd1059fc9add4b3461fe95f2699f008b1843973dd321d585b370af85ac4a74b41a0f7220e3c8f875f6d6020371b2e68491e65e6733e44b33c6d7cb8260a84d78000000000000000abfddd05d7808298ba4ea93c976e3300000000599c4ed12514a09865311d55713747b022755a063b71f1bad57490ebd2dc5c5afcd5bfcf2c48c85138be3ec3778bfee0b09f525c0b846047377add630fac3aacd292173be8f31316b9b60eb20f010ccc0e61dcb646c4a7b422d700c4be910516e022e5f93435bfe1cce2e16f179374aa4f1c7008ea996dc27a73bc0355ddba54fc9d0d0b30ebc52db4dc0bf025a3c2256e7acafe9b7b8c82d386147b0321b70afb9166260b0d18a28f244fbc2bbb50d07bafb5c87a6644bba432ae5e3f05f4892e1370a22783a6000000000000ea124cb5db5f4857d5b74dcf61c197efd7fd57ad866035e22925ff72545b4e9f3f731ffab5d3a93943b4a05e9f12ab99a141a4a95e5d9f6e85f45f69744fcaf0ee76c236825ef640838d0455f1c223e0e248f17e94e323f5a2f00b71dfd37745787a002a97c9f04ea1617732f8c2949c0322b7795aee422a9e60a4c0f7ae4a22902296b910d226f16553992132cee4da95efdf", @ANYRESDEC=0x0, @ANYRESDEC]) 14:29:08 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff4", 0x24}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00'], 0x1}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 255.486326][ T8215] IPVS: ftp: loaded support on port[0] = 21 14:29:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000001a00030b1dfffd946f6105000200000a1f000003141008000800270012000000", 0x24}], 0x1}, 0x0) 14:29:08 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc", 0x48}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="007fff9f3b2ee1020525ead15e22dcbc07000000000000049ce7b29132000000000000"], 0x25}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 255.531333][ T8009] tipc: TX() has been purged, node left! 14:29:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x1000, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/233, 0xe9}}, {{&(0x7f0000000d80)=@generic, 0x80, &(0x7f0000001240)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=""/101, 0x65}}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6, 0x4000000000001ff}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x7f, 0x128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8780, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x10001, 0xffffffff, 0x0, 0x0, 0xfbfffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={@ipv4={[0x0, 0x5, 0x4], [], @initdev}, 0x0, 0x0, 0x0, 0x2}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000540), 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES16, @ANYRESHEX, @ANYBLOB="feb5526b4afbc87b320395903d03ebb47fb78124745f994148dcf1eb690500d1df271edfab66667dbdf0ff0776f1cfb5c273821e449b3b27f599957d6bd5199c83cd29860055e7d14b5b52", @ANYRES32, @ANYBLOB="5346e0b2bb5081d864bdfb912caa2c483c2e647b1b4d8e51624b8c1ff09cabe350e1443429192afc883bcaeb16759e54360ab1590f3354177681d77ef3765fff826cd9bd0a06b0afa805472649e09ad2eeb21011a5069472f38466397640a7fbffffff00000000000000"], 0x7, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r5, 0x0, 0x12000) socket(0x18, 0x80001, 0x0) 14:29:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x0, @private}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x2}) [ 256.313471][ T26] audit: type=1800 audit(1587133748.933:8): pid=8315 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15763 res=0 [ 256.362641][ T26] audit: type=1804 audit(1587133748.953:9): pid=8315 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir036933958/syzkaller.W6ABZ7/5/file0" dev="sda1" ino=15763 res=1 14:29:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7f0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x39) r0 = dup(0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x604c2, 0x10f) write$P9_RREADLINK(r1, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/178, 0xb2}], 0x9) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3220c, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @private}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @empty}, 0x141, 0x0, 0x2, 0x46a, 0xfffd, 0x0, 0x6, 0x4000000000000000}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x0, &(0x7f0000000180)}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x2) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) 14:29:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xfff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="ac227b5499372daf580ea9283074dfb35fc8bee998fed2e3947310eeee71ac81a50442b1d404f6ba63fc9ef0333a5645da65b34f97aa2623ea01a436f76f6f3621284cd4", 0x44}]) 14:29:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x1000, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/233, 0xe9}}, {{&(0x7f0000000d80)=@generic, 0x80, &(0x7f0000001240)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=""/101, 0x65}}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6, 0x4000000000001ff}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x7f, 0x128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8780, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x10001, 0xffffffff, 0x0, 0x0, 0xfbfffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={@ipv4={[0x0, 0x5, 0x4], [], @initdev}, 0x0, 0x0, 0x0, 0x2}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000540), 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRES16, @ANYRESHEX, @ANYBLOB, @ANYRES32, @ANYBLOB="5346e0b2bb5081d864bdfb912caa2c483c2e647b1b4d8e51624b8c1ff09cabe350e1443429192afc883bcaeb16759e54360ab1590f3354177681d77ef3765fff826cd9bd0a06b0afa805472649e09ad2eeb21011a5069472f38466397640a7fbffffff00000000000000", @ANYRES32], 0x8, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r6, 0x0, 0x12000) socket(0x18, 0x80001, 0x0) [ 257.493550][ T8329] IPVS: ftp: loaded support on port[0] = 21 [ 257.553882][ T26] audit: type=1800 audit(1587133750.173:10): pid=8355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15796 res=0 [ 257.590961][ T26] audit: type=1804 audit(1587133750.193:11): pid=8355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/9/file0" dev="sda1" ino=15796 res=1 [ 257.787723][ T7] tipc: TX() has been purged, node left! 14:29:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x0, &(0x7f00000001c0)="080db5055e0b") 14:29:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:29:11 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 14:29:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140), 0x2c}], 0x8) 14:29:11 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\xa9\x16Xi\xdc\xb8\xf8\x04\xeeV\xdf\x92\xf4>oJ\x02u\x9b\x94a\xacX\x92P\xc3,\xe73\x1b*%\xe5\t\xcf\x88e@$\xe7\xe6H\xab\xca\x1e\xce\xeb[\xd8\x87-\x0e\r\xe9\xb6\x91\x0e\xa4h\xed=\xa5e\x8b\x9f\xe5Z\x82\xa6\xee\x01\x8bf~\x85\x13N?h\xb2\x95g8J\xdf\xd3\xd6', 0x3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="12"], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) r2 = memfd_create(&(0x7f0000000200)='\xd7\xa4\xaa\xb3U\x19\xd4\xd6\xdf0Im\x8f:m\xd9\x17\xb5\xd4\xfe\xb6Z\xeb9b\x14\x8b\xa20\xa6\x9cl S\v\'\f\xaa\xfd\x99p9\x1e\xcfY\t\x15\x8c\fS# \x7f\xfe\xd4\xb7\xc6\x93\xaf7 \xf78\"~\x8308go!\x1e\xb5a\xb6\xb0\xf4O\x8a\xcf\xb5H\xb3\x90\x04\'>\xf2\xfch\xa0)v\x14\xe0\x98\xf5%\xc1<<\xca\x06\x18\x98y\xb5f\rZ\x1eo\x9a\x1fWi\x10x\x1b\xe6\a\x1d\xff\xfc\xd6UK\xc9\v^\x0e\t\xc5\xcd\x0e\xfa\xd3\xf8\x1bi\x95\xe0\xdc\x89\x91^R\x9f{5\xb2\xcb\x1dZ\xcd\x80n6`\xf6\xddY\xd9\xaf\xe1\xec\b\f\x11#*O\xc5[m\x98n\xc4\xf9\xb82S\xf7\xfc\x81;\xe6./\xd8T\x1b(H\xf7)5\xe1\xbeR\xe5Q\xbe\v\xb7JZ\x02\x1c#\x94?.\x05\xe4\xb5\xa4\xabgK\x96%\x80j\xe9\x9c\x97\x18\xdf\x9et\xa9\xca\x06\b\x95\x82\xf5\xcfaD\xbce\x86\x9b\x9d\xd2', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 14:29:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000c802000078010000780100007801000078010000000000003002000030020000300200003002000030020000030000000000000000000000e0000001ac1e000100000000000000006272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801780100000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000c000636f6e6e747261636b000000000000000000000000000000000000000002fe880000000000000000000000000001000000000000000000000000000000002001000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000001000000000000000000000000000000000000000feffffff"], 0x1) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 14:29:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000040657050e9a56378d2400000000000005000100060000000900020073797a3000000000ba84fbb8a7c0c35856b60c0696db96c71c3cf7dd85f0bac8dd856a92605be48ba05effcf26015c3f08f6320f205bcd1c5dacc8ea9b5b88bb"], 0x28}}, 0x0) 14:29:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x0, &(0x7f00000001c0)="080db5055e0b") [ 258.744944][ T8391] x_tables: duplicate underflow at hook 3 14:29:11 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 258.802821][ T8391] x_tables: duplicate underflow at hook 3 14:29:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0x100}, 0x5f}) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x22, 0x0) 14:29:14 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000040)={0x20080522, r0}, 0x0) 14:29:14 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14:29:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0x100}, 0x5f}) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x22, 0x0) 14:29:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0x100}, 0x5f}) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x22, 0x0) 14:29:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:14 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14:29:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x400}, 0x8008, 0x3f, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100, &(0x7f0000000580)) getsockopt$sock_cred(r2, 0x1, 0x24, 0x0, &(0x7f0000000000)) r3 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x3c2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r4 = geteuid() memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000002b40)=ANY=[@ANYBLOB="b40285fe54f06f2f7941a78964276784555ecb83f2427ae688baa0c26a9cf0de010171a0cd50", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000811) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=r4, @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000003140)=ANY=[@ANYBLOB="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"], 0x1, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) getpgid(0x0) r6 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x181602) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 14:29:14 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='\x80', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0xfe96}], 0x1, 0x81003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 14:29:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) dup(0xffffffffffffffff) 14:29:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup2(r0, r1) 14:29:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) dup(0xffffffffffffffff) 14:29:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='\x80', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0xfe96}], 0x1, 0x81003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 14:29:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x400}, 0x8008, 0x3f, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100, &(0x7f0000000580)) getsockopt$sock_cred(r2, 0x1, 0x24, 0x0, &(0x7f0000000000)) r3 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x3c2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r4 = geteuid() memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000002b40)=ANY=[@ANYBLOB="b40285fe54f06f2f7941a78964276784555ecb83f2427ae688baa0c26a9cf0de010171a0cd50", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000811) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=r4, @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000003140)=ANY=[@ANYBLOB="00fb6100003acf0acd36bc9275ef9e31459a65c3fa1cc75a9e6ba3ca854b3e8af7985884f30c6c85dac248b586d9f0df89fdfe61810e478a0207a27ca59f856d8d59e533a4dc1997b234371750d9ce344909000000ccabfeea72cf580af4962db7b0fdce047e61393231616d285d3042f45d6a7eee9eb620cd512d4f4ec3258bb9388e3af531099a9e8613bceebce76ac8c8bd1150e3c40a8202ebb7ef8ae2595c9d33cfbcbedba280499bff74479538e095cecc2e9c0bba1683f9d4c082e2a9e90b066483098227007576d464ed6567cb74d9eee1ef1f3c84dc3faa71771b7cdec1e50762e5231a3d448ae2cb3bb5a994ef8a54c90d9dcd2dc4c96d16a99e5197f646602b7f00ebff7297195236e171b4e28bfb19b86a6bd64c466b4a4ab1afbbb83bdb274de0b971810d719d77f0fbff76ecab6f55728f23e9302797fd2f5e7756404551eac36e32c99bf8450dda89ee63743c263fd2bbab31477830d83c880fe9605ccaf1373cf7277e0af37989024ca52f0d66f82a968824e907696bcb9e645212dfc97061e444f06f9bfc9f6751ab3ec667a6117e220de5ce6e77ced75cd2aa3f433d4bd4ac40bfc37ac55cb46a0cd284b014d35c6986b3f4554694330caba45c9a53ecfbbc978f7c06000000e8066260ffdcc4b2104e0523797f5266d09e461628c7ead95d473ceedddaf30422fe730686d961bceeea2b301aa90968bcc688fc1e95b253627270fcdabec50b9d75f54ed7e15f9d9ad8407c0d4bc3b6c651fba50dec6aaa0cdaa226194830d6a7bb2cf20ea477f6d4b3ba4f0dfde203dc9f78764ae2ba44bd0a0af1a84362924f7b23705ec40ed7992830c122c28892b376599d4347f4768e4d2120e5a97573a14c0ab6d378924cd6a79af204553103819ba42a221ad37e0558d1da70e15a4b559c62b493ee11fa63ece76d143a820df5aa90716a43bfa9305745fd1e4745022152ff991610e92bbe1f1017ce6f5b8a6c1a0a60892e760d8f9ae7201cb277d6276a16224b380a0dc80ec5decb2f16661721948c5530e65e509761c1123667bc2e98585867148cf45b5f32f4de67bc4d60c03243c245b4033c37852aa5613e41495194552abaa06c6ae66c44bd5ca16ff5a87b5ad1e163869e104f14e0fbb02b813b2aea87fc0ba72ee91a4d979064acb469a03454fec79133183e9c1b48b38b97cc29cd40587f877181d3770851e1b42a46c2849cff1e17120cbf491459a4f946960254b7fcb1604ddb938c6b2f5b242f5a87e5de20584cbe57b50c907c462d0500000000000000a1ef88f9716e10b9c2abdca8067eb27f2c2c87e0b222140cfb591ecd98a9167b54619ebd78c663c5a1b005adb92df7833f110ab35b6408482541e69e1b0b48f95ed6114a18c782590c95b484ef8a887e163b727cf5ecbb9aef51b97d60db6b97671155e7fb3367ae096c3665cf38e00ec38ed8d89f96b3e838f3000000b93a1c275a3344e257487b96a21d89f02cdb7039944becedae2fa917b65c04f962d93598bb8a7557087a37969474d5a333c994336281cac85153b172d669ef6bd8f7288b9587ab286f260db6b1b57c5e49584524b06f5120c94862f3abe1fae27ead36ce5c7e291f949a65fc9db9f05389cd94d80f6a4a423c104122a7be3af001acd59b0503df5b4d968955162dff78a7c209727f23cd7c6ed13253bc4a6cace0313cd4006035e51c3b6c15554ba85deeaaa23bb4c88254f662148c20a5c876828367a36a251a1cc187d3f7541ecddbd8a2703c4c7af97a3b6d339a005f64678ef5d0e4d3d3b29d2f10e4feb5fddb3927929b5d788d12a1c6513ff211de61b23384177de22f168d72eeb07ffda658463277513ca690e03f7e6caadef11c15c488426493ce10cda331b87110488de810bbb50310f967b3247f6ac9d72eee12ffd2ab09e45eaa1df5e50b366445fffbef90192620b9663d6631c8215fb65fe5d9f547dd6b326bc2b9eded0289eeb98365fac0e676f302036015c7657bc9823bc940686ac9450391c9d5a7553e993d3a48ba6d7f8fa28b51e64a453d14c20bbcfd17eff749af29b2db2ecc4024e9821d882aa6f869b93a8b2d685868a602034634fb5e85a9ae5ec5ec6e805c03edb3c2c79980a2019fa72c43137682e7681eb66a4f7180cad4e5c0fca261ed600063e19d967f8e46358e967de22a6319d9b4b06973e6306f5efb556d6540ff6f617b9b4cf43ac9e8d7f6f8a53e8df6613d3a15739a9a8c7c5b506ada39e63c609ad10bfe4b3632f8fdb401a27639e82ab399a0b41027930517c65827621b71069d260dbe7e69f1c6b76c4e769c4ceccf19f07b0c33298cc0c3c80de042de19ddf9284dce52e76f151f0bb860640e2a405cd4c562b3a9301fb1fc0f3e57dffd09fc9d2bc6cd59f6c7dd36e3b6b8417f4c6625d2c1f4e2dda69c583c0763a98e9659e6bc2b4f38b83faca2d594d5104aee5bb7de9bb24a3a92cfb5d7451ebbe1363bda13b07f3d9a95ead00584275e8209d888b9c5a7f4cd398bf5be59438b1d45f0da9ed937cce052fc28a10b694e2f1e9cd56341d27c9ccab24be4e1263f190dbc156978ecc8dd9283eb1cfb36dcc283d604e5c16711fb50bcce4b16731a6598d17a868f6c15d5f9b0f550c93fa07531317fa5dfb0e96542ddfb6aff7eaf607ac511112dc6b2eee4450ad73788144ff51e1b093dd40cdbe0763769f5cee27fdeeb2eb5044f98bd5ad1916b3f98b3ee626ae238098455f8684bf5b4a0e68965d005d3857dd32f38cb2ee65849a9d3970ebd8d8ecacff1f44a8e444309ff8dbce0f37aaf2d1b9d157fdaa135ab4bffc809d14d0f125f112af465327d4fdd4cb6ec35aeac42b002eb5c3d3785f933f530c257c4a00e9938130e5e244cff80dea456f46a5ea33799db2b7c9c1c4613d1733227846fc4dddc099f809fe050add8b5c92f168f7caf03cfd7a97318a1b95e8ee8cae655043e784d3a8fe61c10034964d772718bf149d78a7b92ffaf3698cc7f410ad601eddfaade70f2f3182c007595121d3b5e3f2f9ad173794d2ae1c93a2f767b8513f6214de09a783d788883b071b967fe779ef5b3d66edca882c444bc18d697bfb691424794e96ba526d514893376e08440b64ef51d7e75a571b3599af1e95de4bfa1c2a45523f75310bb95e16916b60c25d2b9311c7c9139626baabb26275833f1959210d8203f54080e422ca59dac9f9e5b4bceb7fb1067fa867e9459be96a8d9f377759d35fb8ff30c6820ea5647abfe4dbb489486ee521dabc8f14cd9a263b508cbfb4df20723699fe3034218d4c5550fce21c701e43f0dd928ed826fc3325243d9e02198ced07f5510d87da6b60adc8396081cc521f724b3c9a272085b5bf6cdfee8fe9cb838f05e73740e439e90b64355e9aa3bf2a955621da2e13fdcd27f7b5b41474b9c4bf854f0b7fb09e2e6b655a08c43ee854f98ef684df189a538fc96ae193a0b59b5577ace0f73eeb181218550c2e85c16379e900d6475d4c50dfb05aa459b074509d856916ea5f92cf1877ef354d12e1eab03162396ad8608af2d5a7f6860b1b3fd72538b1801b230688571601ce14a95e9db2ca7cbaef063a24460d708f770ad0edea730f596c4c8a1e633db95e1dfc73d2d56a466668241458e12221e384f711878e7279f78fce963319c6d2dbee1744f41e0de97a31fe080d92bd8a4e5ab66d713c3c55e9c2eb173343e9f1618a79102c5b018689dc36b4f42f092f52d68c5a1d5c80abe0dd1ab93f5d1f97b851ae2cb0a63919bf87e087b6cc0e6d5898a8c9f810a2b4cb871bc8bd64f5305b460ec56a9873dba9e500e205e038f2f725fff8999fdc6dabe7c7aee10871141f9ea42f281d6bcd8220ee69b93801246c3b6149e1c7492fa441fb33600ee1ed745119c582614b5d09d40cb9f6ad4a8d51e0c5d9426892a1ab8fb66a3276ad208eb11226d6470cb290db4899e452ef424609d620200000083e1c69a9e0de986ad1c80a423ee62e7e7448ce147168ca48fee7bd1b19b111646290bd7643ce223deb31ab888cf840cf959aa1965f56bfed9d779079ba874d27329b4f701bf2d33e7e6116a0483b36121a96ae6ac839c382595ac0150986e890bdf13618927d2e49e5d4e53f0e881c657795566318248efa443885cfba0cfb9a1691a450960ab7210ec83519978aaf8adbb7ba30fceaf30749d83306cabb95f6018545beba4f50cacf59356233c639f39e21ad871bb0f6f10ddb1233251f54acb1cc09e9ddee86abd82b65f69013917733a20f233b25b306522e25c95ad16ccb0da802681f50a61ebc3a45bf6848ed61ba35d346339d6840d1345c67ae833803e17bf36ab2496f0dc8176d5012798904058a7d496a4b82e21b462897d7a80d08de0707d68c50ae176bd0d27d5c7bfa7c4cc31ba05bfbc4a838f67172bdc5a9c0eac89139ed75587df246d63e3c74f4077638c563b6197352b57931f2eabb3a8f8e5720bcde05f321a055cea2ea73dd5ef8d2058ef9c49f01ceecf66cbd810213f5462b898cef075ad86b8d89edc7e675dc04a9a1f35384f58bb535a655d3e0894dc6deed84d6dc6481c2f85f61cc421fd2483a39edb37ea3915ba352cec4721ad0a8daecd43b48af52bc07c2d96e2914349253c0b5dc1bef3480f55e1732c86cfe5f7acc8830560e5c50f38051cead16a01e9a10180000000bf81d8000000f5f34a6995981e4b997d4b177df85538483fa40ca24dfe5ac92b37dcb4939515f276b993d4600bddd485c28f733251bbb0912f506ecdac10e73d6ee0ff821ba24e5ef2d960bf33d4e16f92c43694b2d47c9ca783aac2352858cccc7ae87d8604ed0e93d32146fe2b6425e74552abfcb70e90939bed84c7b9215985ee2111dab07c3fbd83fefb658595d2bf27a436a658364fe40a7ae96dc8ae03ccca4d278e538012aef29111b84b5a4c692036690c57dd18bf60b1fec21a727486935bf51d7f1d65a5cf0110850dca71bfd6488768ab1eadb39e9a0270bf31153259ce7e87bb1dfd4f84fa5d8f2f9cb7d0d2ab779aa9ce8b6cda424b89067b78b37afe68f67ce4bf7c4ae9be5cd4457a91312f68a2e76a5893844bb0708f07535a5bf52e1b88893d9b702963ec9c39b295f55f6af2fe172b8d2dcdf5523e902fb528b2568fe669c65ddf2beef32e05f29f5aa3a3de1126dc340d7dbef3960db7f49fd77b5b2cbdaf1ce69b69f9e14defbda8fb5f52882c869ed32bc81b95cf1c5309f9b43579318e61207c5d01307f2c3afbee3fbdabd545e781502fb56a44511d43b70b4dd23490ecf2b604fc94c386b616770c9f038babeebb8a711bd0522e551d68f4acf1829478ca893a0391c1b746230990fad2a7a099b8e04b265b3a955d216975a91462dbc417ee34832ecff3f2fdbb098d218be0df865626989c64ac4545f8ae64d507288effd1ff060d93f5ec98a8e1796e6d62fbb07d64cb46e99dced4b179408ed95f3ed2bbde4f86b5ab481e6ccedfb94e9ff7fafb71893d6ebfd37243b25d12c5a11bc195909bedc28e94025397c7e0158f78b38b2c73a567d1d3047145caa69b0a388058cf72972db4a37d62bcbe339ac4206567c0d732ec14fd090756a6caa700cda92801274bcc5b0ea88d6d16b1f7e3a96d05bbe3ec944dbe867bc6b8f6026493a1ce45688f2cf423fcd37f72f500000000000000000000000000000003d291d4ebc6541f730d428f1712601ccb6afa7c3fc2e7c0f29ef48b9b244862f49d40ccfbb56cb54eee7db6a0bbaaee0d3f390f603718d2083cb2052326354eba3e529cdb84c0f878fe9d58de23c6feddeff2016190833886f5c55968dcaaf41ce644e802174e0770bbdbc7b4a8b8f7e7dc498b0dfb3417c5d89c6621dd126523c712f5f4ad2514fd4880f566a68cf3f3f5c332ac4d110be8dbad51bfb3e21b20e6f86d7c1f57cf806b2fcadd80e2d68b3fed82638c1770666f2c7bb4d62a869d9ea4dc4dbf537017ffa90de02da0aac24a396f411dbf2a15c1069584249cfc43cefe6a3ad5dc25addd7d31f647321f8a3f62fc3fd6a2d0bc7975a096b85c7dc0cb0d3d24542a5f6dbe6e36ccd1d6e3f34df3fa19c9d4d65ca3e133846dbb4d7bfcfdff272b248247bb1ce3696de9c9601659a8538851333cf857aecbe1be62b793e79aba45a3515d4824ceaf8377a43acbc674646dd04691bb8a5514dd96a3ef177d811f4fe16f26114715899547dba15c79cb3887e5a7b9a4bc8792b3e7c90299279d2c6fc6264fb06db5976ab8364ff266bea001"], 0x1, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) getpgid(0x0) r6 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x181602) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 14:29:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x400}, 0x8008, 0x3f, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100, &(0x7f0000000580)) getsockopt$sock_cred(r2, 0x1, 0x24, 0x0, &(0x7f0000000000)) r3 = accept(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000540)=0x80) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x3c2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r4 = geteuid() memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r5 = geteuid() sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000002b40)=ANY=[@ANYBLOB="b40285fe54f06f2f7941a78964276784555ecb83f2427ae688baa0c26a9cf0de010171a0cd50", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000811) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32=r4, @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000003140)=ANY=[@ANYBLOB="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"], 0x1, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) getpgid(0x0) r6 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x181602) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) 14:29:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x2, 0x8000) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendfile(r3, r6, &(0x7f00000000c0)=0x3, 0xe9) sendfile(r0, r1, 0x0, 0xa195) [ 264.799379][ T26] audit: type=1800 audit(1587133757.424:12): pid=8497 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15845 res=0 14:29:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:17 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) readv(0xffffffffffffffff, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x85) ftruncate(r2, 0x2008002) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000254000/0x11000)=nil, 0x11000, 0x0, 0x10, 0xffffffffffffffff, 0x972ce000) syz_open_procfs(0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 264.838544][ T26] audit: type=1804 audit(1587133757.424:13): pid=8497 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/16/file0" dev="sda1" ino=15845 res=1 14:29:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.912927][ T8501] debugfs: File 'dropped' in directory 'loop0' already present! [ 264.937408][ T8501] debugfs: File 'msg' in directory 'loop0' already present! [ 264.990314][ T8501] debugfs: File 'trace0' in directory 'loop0' already present! 14:29:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:20 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:20 executing program 5: socket$inet(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket(0xa, 0x3, 0x84) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4000004) 14:29:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x2, 0x8000) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendfile(r3, r6, &(0x7f00000000c0)=0x3, 0xe9) sendfile(r0, r1, 0x0, 0xa195) 14:29:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:20 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) readv(0xffffffffffffffff, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x85) ftruncate(r2, 0x2008002) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000254000/0x11000)=nil, 0x11000, 0x0, 0x10, 0xffffffffffffffff, 0x972ce000) syz_open_procfs(0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:29:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) [ 267.753704][ T26] audit: type=1800 audit(1587133760.374:14): pid=8551 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15858 res=0 14:29:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 267.835579][ T26] audit: type=1804 audit(1587133760.434:15): pid=8551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/17/file0" dev="sda1" ino=15858 res=1 [ 267.889995][ T8556] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 14:29:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:20 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(r1, 0x7, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, 0x0) 14:29:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:21 executing program 0: 14:29:21 executing program 0: 14:29:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:23 executing program 2: 14:29:23 executing program 5: socket$inet(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket(0xa, 0x3, 0x84) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000010000027465616d5f736c6176655f3100080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4000004) 14:29:23 executing program 0: socket$inet(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket(0xa, 0x3, 0x84) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4000004) 14:29:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:23 executing program 2: [ 270.984546][ T8610] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 270.999833][ T8612] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 14:29:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:23 executing program 2: 14:29:23 executing program 2: 14:29:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:24 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 271.594127][ T8634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:29:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xe) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 14:29:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 14:29:26 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:29:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xe) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 14:29:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 14:29:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:29 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:29 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @userptr, 0x10ff03}) 14:29:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:29 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 14:29:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 14:29:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:29:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:29:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_ROPEN(r1, 0x0, 0x0) 14:29:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:32 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:29:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 'syz0\x00', 0x0}) 14:29:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x0) 14:29:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:32 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2d, 0x1, 0x5, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 14:29:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 14:29:32 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="020fff63bdb97e8c39514a9fc457f0802bc8367e023cbcbc5b27ea4517a3f8fe89ca5eb56235fce10e5dec19"], 0x2c) sendfile(r6, r5, 0x0, 0xa198) 14:29:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 280.342361][ T26] audit: type=1804 audit(1587133772.965:16): pid=8796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 14:29:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x1, 0x0) [ 280.415293][ T26] audit: type=1804 audit(1587133772.965:17): pid=8796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 14:29:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 281.060227][ T26] audit: type=1804 audit(1587133773.685:18): pid=8812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 [ 281.084184][ T26] audit: type=1804 audit(1587133773.705:19): pid=8812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 [ 281.128642][ T26] audit: type=1804 audit(1587133773.755:20): pid=8814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 [ 281.160057][ T26] audit: type=1804 audit(1587133773.785:21): pid=8815 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/27/file0" dev="sda1" ino=15930 res=1 14:29:35 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:35 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 14:29:35 executing program 2: 14:29:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:35 executing program 3: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:35 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="020fff63bdb97e8c39514a9fc457f0802bc8367e023cbcbc5b27ea4517a3f8fe89ca5eb56235fce10e5dec19"], 0x2c) sendfile(r6, r5, 0x0, 0xa198) 14:29:35 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 14:29:35 executing program 2: 14:29:35 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 283.222217][ T26] audit: type=1804 audit(1587133775.846:22): pid=8832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/28/file0" dev="sda1" ino=15878 res=1 [ 283.310271][ T26] audit: type=1804 audit(1587133775.876:23): pid=8832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/28/file0" dev="sda1" ino=15878 res=1 14:29:36 executing program 2: 14:29:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:36 executing program 2: 14:29:38 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:38 executing program 2: 14:29:38 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="020fff63bdb97e8c39514a9fc457f0802bc8367e023cbcbc5b27ea4517a3f8fe89ca5eb56235fce10e5dec19"], 0x2c) sendfile(r6, r5, 0x0, 0xa198) 14:29:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:38 executing program 3: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:38 executing program 2: 14:29:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.313073][ T26] audit: type=1804 audit(1587133778.936:24): pid=8866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/29/file0" dev="sda1" ino=15955 res=1 [ 286.345893][ T26] audit: type=1804 audit(1587133778.936:25): pid=8866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/29/file0" dev="sda1" ino=15955 res=1 14:29:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 14:29:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 14:29:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) 14:29:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 286.669567][ T8877] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 14:29:41 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x5ec, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xffffffa8) 14:29:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 14:29:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:41 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="020fff63bdb97e8c39514a9fc457f0802bc8367e023cbcbc5b27ea4517a3f8fe89ca5eb56235fce10e5dec19"], 0x2c) sendfile(r6, r5, 0x0, 0xa198) 14:29:41 executing program 3: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 289.438901][ T26] audit: type=1804 audit(1587133782.066:26): pid=8905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/30/file0" dev="sda1" ino=15980 res=1 [ 289.483172][ T26] audit: type=1804 audit(1587133782.066:27): pid=8905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/30/file0" dev="sda1" ino=15980 res=1 14:29:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 290.334972][ T8937] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 290.334972][ T8937] 14:29:44 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:44 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:29:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 292.434806][ T8966] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 292.434806][ T8966] 14:29:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:45 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 292.478813][ T26] audit: type=1804 audit(1587133785.106:28): pid=8975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/31/file0" dev="sda1" ino=15991 res=1 [ 292.505325][ T26] audit: type=1804 audit(1587133785.126:29): pid=8975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/31/file0" dev="sda1" ino=15991 res=1 14:29:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:45 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:45 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 292.786095][ T8993] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 292.786095][ T8993] 14:29:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:45 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 293.334058][ T9021] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 293.334058][ T9021] 14:29:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 293.428491][ T26] audit: type=1804 audit(1587133786.056:30): pid=9032 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/32/file0" dev="sda1" ino=16001 res=1 14:29:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) [ 293.506859][ T26] audit: type=1804 audit(1587133786.056:31): pid=9032 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/32/file0" dev="sda1" ino=16001 res=1 14:29:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.741427][ T9047] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 293.741427][ T9047] 14:29:48 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:48 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:48 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa198) 14:29:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:48 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 295.986972][ T9077] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 295.986972][ T9077] 14:29:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 296.038132][ T26] audit: type=1804 audit(1587133788.667:32): pid=9087 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/33/file0" dev="sda1" ino=16016 res=1 14:29:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:48 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 296.346073][ T9103] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 296.346073][ T9103] 14:29:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:51 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:51 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:51 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa198) 14:29:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) [ 298.998824][ T9133] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 298.998824][ T9133] 14:29:51 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b129ae2bba"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 299.136388][ T26] audit: type=1804 audit(1587133791.767:33): pid=9148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/34/file0" dev="sda1" ino=16031 res=1 14:29:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 299.333595][ T9156] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 299.333595][ T9156] 14:29:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:52 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) [ 299.680476][ T9175] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 299.680476][ T9175] 14:29:54 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:54 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:29:54 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa198) [ 302.105483][ T9201] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 302.105483][ T9201] 14:29:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 302.241008][ T26] audit: type=1804 audit(1587133794.867:34): pid=9214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/35/file0" dev="sda1" ino=16050 res=1 14:29:54 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 302.505513][ T9226] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 302.505513][ T9226] 14:29:55 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) [ 302.769015][ T9241] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 302.769015][ T9241] 14:29:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:57 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:29:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:57 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa198) 14:29:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) [ 305.202837][ T9266] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 305.202837][ T9266] 14:29:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 305.582076][ T9287] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 305.582076][ T9287] 14:29:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:29:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 305.926687][ T9304] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 305.926687][ T9304] 14:30:00 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:00 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa198) 14:30:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.278764][ T9330] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 308.278764][ T9330] 14:30:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.568054][ T9354] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 308.568054][ T9354] 14:30:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="27909501b1"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.742645][ T9364] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 308.742645][ T9364] 14:30:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) [ 309.088487][ T9376] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 309.088487][ T9376] 14:30:03 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:03 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa198) 14:30:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 311.419690][ T9404] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 311.419690][ T9404] 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) [ 311.735044][ T9430] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value ¯ for -oresize [ 311.735044][ T9430] 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 14:30:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:04 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="279095"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 312.517252][ T26] audit: type=1804 audit(1587133805.138:35): pid=9471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/39/file0" dev="sda1" ino=16093 res=1 [ 312.624934][ T26] audit: type=1804 audit(1587133805.138:36): pid=9471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/39/file0" dev="sda1" ino=16093 res=1 14:30:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:05 executing program 1: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 313.165146][ T9502] ptrace attach of "/root/syz-executor.1"[9500] was attempted by "/root/syz-executor.1"[9502] 14:30:05 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:05 executing program 1: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:30:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:06 executing program 1: getpid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:30:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 313.345776][ T9512] ptrace attach of "/root/syz-executor.1"[9511] was attempted by "/root/syz-executor.1"[9512] 14:30:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 313.451654][ T9526] ptrace attach of "/root/syz-executor.1"[9525] was attempted by "/root/syz-executor.1"[9526] 14:30:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x0, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 313.514181][ T26] audit: type=1804 audit(1587133806.138:37): pid=9524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/40/file0" dev="sda1" ino=16095 res=1 [ 313.633497][ T26] audit: type=1804 audit(1587133806.138:38): pid=9524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/40/file0" dev="sda1" ino=16095 res=1 [ 313.668296][ T9535] ptrace attach of "/root/syz-executor.1"[9534] was attempted by "/root/syz-executor.1"[9535] 14:30:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:06 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:30:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="726573697a653daf"]) 14:30:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 314.316882][ T9558] ptrace attach of "/root/syz-executor.1"[9555] was attempted by "/root/syz-executor.1"[9558] 14:30:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 314.449139][ T26] audit: type=1804 audit(1587133807.068:39): pid=9566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/41/file0" dev="sda1" ino=16099 res=1 14:30:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 314.547523][ T26] audit: type=1804 audit(1587133807.068:40): pid=9566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/41/file0" dev="sda1" ino=16099 res=1 14:30:07 executing program 1: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 314.617655][ T9571] ptrace attach of "/root/syz-executor.1"[9569] was attempted by "/root/syz-executor.1"[9571] [ 314.675357][ T9572] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 314.830966][ T9586] ptrace attach of "/root/syz-executor.1"[9584] was attempted by "/root/syz-executor.1"[9586] 14:30:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:07 executing program 1: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:30:07 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 14:30:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:07 executing program 1: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:30:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:07 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 315.272068][ T9609] ptrace attach of "/root/syz-executor.1"[9605] was attempted by "/root/syz-executor.1"[9609] [ 315.298639][ T9603] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 315.409243][ T26] audit: type=1804 audit(1587133808.028:41): pid=9619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/42/file0" dev="sda1" ino=16089 res=1 14:30:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 315.540281][ T26] audit: type=1804 audit(1587133808.028:42): pid=9619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/42/file0" dev="sda1" ino=16089 res=1 14:30:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 315.735572][ T9629] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:08 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 14:30:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) 14:30:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) [ 316.268059][ T9653] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) 14:30:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 316.471768][ T26] audit: type=1804 audit(1587133809.088:43): pid=9668 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/43/file0" dev="sda1" ino=16110 res=1 14:30:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 316.546850][ T26] audit: type=1804 audit(1587133809.128:44): pid=9668 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/43/file0" dev="sda1" ino=16110 res=1 [ 316.570841][ T9672] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4ae", 0x12}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:09 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 14:30:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) 14:30:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.330596][ T9713] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) 14:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 317.686275][ T9731] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) 14:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.970343][ T9750] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 14:30:10 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 14:30:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) [ 318.275209][ T9763] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 318.341664][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 318.341683][ T26] audit: type=1804 audit(1587133810.958:47): pid=9771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/45/file0" dev="sda1" ino=16109 res=1 [ 318.398096][ T26] audit: type=1804 audit(1587133811.018:48): pid=9773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/45/file0" dev="sda1" ino=16109 res=1 14:30:12 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) 14:30:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resi']) 14:30:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:12 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) [ 320.362652][ T9789] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "resi" 14:30:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resi']) [ 320.419313][ T26] audit: type=1804 audit(1587133813.038:49): pid=9800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/46/file0" dev="sda1" ino=16131 res=1 [ 320.469721][ T26] audit: type=1804 audit(1587133813.038:50): pid=9800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/46/file0" dev="sda1" ino=16131 res=1 14:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.649554][ T9807] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "resi" 14:30:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resi']) 14:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.885011][ T9819] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "resi" 14:30:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize']) 14:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.139026][ T9830] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "resize" requires an argument [ 321.139026][ T9830] 14:30:16 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize']) 14:30:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:16 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 14:30:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.488507][ T9849] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "resize" requires an argument [ 323.488507][ T9849] [ 323.538791][ T26] audit: type=1804 audit(1587133816.158:51): pid=9865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/47/file0" dev="sda1" ino=16147 res=1 14:30:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize']) [ 323.683930][ T26] audit: type=1804 audit(1587133816.208:52): pid=9865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/47/file0" dev="sda1" ino=16147 res=1 14:30:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.839799][ T9886] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "resize" requires an argument [ 323.839799][ T9886] 14:30:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize=']) 14:30:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 324.079052][ T9899] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 324.079052][ T9899] 14:30:19 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:30:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize=']) 14:30:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:19 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 326.629063][ T26] audit: type=1804 audit(1587133819.249:53): pid=9933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/48/file0" dev="sda1" ino=16167 res=1 14:30:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:19 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 326.684927][ T9927] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 326.684927][ T9927] [ 326.697321][ T26] audit: type=1804 audit(1587133819.279:54): pid=9933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/48/file0" dev="sda1" ino=16167 res=1 14:30:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 326.789836][ T26] audit: type=1804 audit(1587133819.409:55): pid=9946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/49/file0" dev="sda1" ino=16158 res=1 [ 326.813673][ T26] audit: type=1804 audit(1587133819.419:56): pid=9946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/49/file0" dev="sda1" ino=16158 res=1 14:30:19 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='resize=']) 14:30:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 326.997854][ T26] audit: type=1804 audit(1587133819.619:57): pid=9963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/50/file0" dev="sda1" ino=16155 res=1 [ 327.048811][ T9960] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 327.048811][ T9960] [ 327.075121][ T26] audit: type=1804 audit(1587133819.649:58): pid=9963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/50/file0" dev="sda1" ino=16155 res=1 14:30:22 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:22 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:30:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x10000065, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x80000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setuid(0x0) ioprio_get$uid(0x3, 0x0) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) 14:30:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2817e, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) 14:30:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2790"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 329.726552][ T26] audit: type=1804 audit(1587133822.349:59): pid=10002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir036933958/syzkaller.W6ABZ7/42/file0" dev="sda1" ino=16165 res=1 14:30:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/233) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) 14:30:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xa}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) [ 329.787493][ T26] audit: type=1804 audit(1587133822.359:60): pid=10002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir036933958/syzkaller.W6ABZ7/42/file0" dev="sda1" ino=16165 res=1 14:30:22 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 329.852064][ T26] audit: type=1804 audit(1587133822.399:61): pid=10003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/51/file0" dev="sda1" ino=16181 res=1 14:30:22 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 329.957432][ T26] audit: type=1804 audit(1587133822.399:62): pid=10003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/51/file0" dev="sda1" ino=16181 res=1 14:30:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) [ 330.049583][ T26] audit: type=1804 audit(1587133822.629:63): pid=10020 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/52/file0" dev="sda1" ino=16179 res=1 [ 330.135285][ T26] audit: type=1804 audit(1587133822.629:64): pid=10020 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/52/file0" dev="sda1" ino=16179 res=1 14:30:25 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:25 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 14:30:25 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2a) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 14:30:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='autogroup\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x17) 14:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 332.808916][ T26] audit: type=1804 audit(1587133825.429:65): pid=10054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/53/file0" dev="sda1" ino=16197 res=1 14:30:25 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:25 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) [ 332.884076][ T26] audit: type=1804 audit(1587133825.429:66): pid=10054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/53/file0" dev="sda1" ino=16197 res=1 [ 332.968451][ T26] audit: type=1804 audit(1587133825.589:67): pid=10063 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/54/file0" dev="sda1" ino=16082 res=1 14:30:25 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 333.040512][ T26] audit: type=1804 audit(1587133825.619:68): pid=10063 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/54/file0" dev="sda1" ino=16082 res=1 14:30:25 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 14:30:25 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:25 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/233) ioctl$PPPIOCSDEBUG(r0, 0x4004743c, 0x0) [ 333.387920][T10081] syz-executor.3 (10081) used obsolete PPPIOCDETACH ioctl 14:30:28 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:28 executing program 4: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2817e, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) flock(r2, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r6, r2) 14:30:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 14:30:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 14:30:28 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/9, 0x9) [ 335.880718][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 335.880734][ T26] audit: type=1804 audit(1587133828.499:73): pid=10101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir227617447/syzkaller.2ezDar/95/file0" dev="sda1" ino=15764 res=1 [ 335.954907][ T26] audit: type=1804 audit(1587133828.579:74): pid=10107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/57/file0" dev="sda1" ino=16001 res=1 14:30:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000600)={@val, @void, @eth={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "bc0ebf", 0x2c, 0x6, 0x0, @remote, @private0, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}}, 0x6a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 335.989996][ T26] audit: type=1804 audit(1587133828.579:75): pid=10107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/57/file0" dev="sda1" ino=16001 res=1 [ 336.070862][ T26] audit: type=1804 audit(1587133828.689:76): pid=10116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/58/file0" dev="sda1" ino=16069 res=1 14:30:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 336.115797][ T26] audit: type=1804 audit(1587133828.689:77): pid=10116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/58/file0" dev="sda1" ino=16069 res=1 [ 336.201958][ T26] audit: type=1804 audit(1587133828.829:78): pid=10125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/59/file0" dev="sda1" ino=16069 res=1 14:30:28 executing program 0: r0 = open(0x0, 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 336.236447][ T26] audit: type=1804 audit(1587133828.859:79): pid=10125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/59/file0" dev="sda1" ino=16069 res=1 14:30:28 executing program 0: r0 = open(0x0, 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 336.304488][ T26] audit: type=1804 audit(1587133828.919:80): pid=10129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/60/file0" dev="sda1" ino=16069 res=1 14:30:29 executing program 4: clone(0x10008800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2817e, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) [ 336.383899][ T26] audit: type=1804 audit(1587133828.929:81): pid=10129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/60/file0" dev="sda1" ino=16069 res=1 [ 336.453489][ T26] audit: type=1804 audit(1587133828.959:82): pid=10101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir227617447/syzkaller.2ezDar/95/file0" dev="sda1" ino=15764 res=1 [ 336.772333][ T0] NOHZ: local_softirq_pending 08 14:30:31 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:31 executing program 0: r0 = open(0x0, 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 14:30:31 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:31 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000600)={@val, @void, @eth={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "bc0ebf", 0x2c, 0x6, 0x0, @remote, @private0, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}}, 0x6a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000280)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @source_quench={0x8, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}}, 0xfdef) 14:30:31 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 339.103557][T10155] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 339.115065][T10155] ref_ctr decrement failed for inode: 0x3dd3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007aa360ad 14:30:31 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 339.161394][T10155] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 339.177568][T10155] ref_ctr decrement failed for inode: 0x3dd3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007aa360ad 14:30:31 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x16) 14:30:32 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/233) ioctl$PPPIOCSDEBUG(r0, 0x40047451, 0x0) 14:30:34 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:34 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 14:30:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 14:30:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x183d00, 0x0) read(r0, 0x0, 0x0) [ 342.143215][T10222] input: syz0 as /devices/virtual/input/input5 [ 342.155222][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 342.155294][ T26] audit: type=1804 audit(1587133834.780:96): pid=10223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/66/file0" dev="sda1" ino=16222 res=1 14:30:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:34 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 14:30:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 342.253087][ T26] audit: type=1804 audit(1587133834.810:97): pid=10223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/66/file0" dev="sda1" ino=16222 res=1 [ 342.367300][ T26] audit: type=1804 audit(1587133834.990:98): pid=10243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/67/file0" dev="sda1" ino=16218 res=1 [ 342.393724][T10245] input: syz0 as /devices/virtual/input/input7 14:30:35 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 342.412595][T10244] input: syz0 as /devices/virtual/input/input8 [ 342.416664][ T26] audit: type=1804 audit(1587133834.990:99): pid=10243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/67/file0" dev="sda1" ino=16218 res=1 [ 342.477306][T10245] input: syz0 as /devices/virtual/input/input9 [ 342.496949][ T26] audit: type=1804 audit(1587133835.120:100): pid=10259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/68/file0" dev="sda1" ino=16218 res=1 14:30:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='autogroup\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14) [ 342.572768][ T26] audit: type=1804 audit(1587133835.150:101): pid=10259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/68/file0" dev="sda1" ino=16218 res=1 14:30:37 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400000) 14:30:37 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@dots='dots'}]}) 14:30:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0xfff, 0x0, 0x0, "70af8919c4de88f3"}) [ 345.327959][ T26] audit: type=1804 audit(1587133837.950:102): pid=10299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/69/file0" dev="sda1" ino=16247 res=1 [ 345.369781][ T26] audit: type=1804 audit(1587133837.990:103): pid=10299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/69/file0" dev="sda1" ino=16247 res=1 14:30:38 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 345.407475][ T26] audit: type=1804 audit(1587133837.990:104): pid=10299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/69/file0" dev="sda1" ino=16247 res=1 14:30:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffff00000000}, {&(0x7f0000000080)="68087e889c09e89504c8cf4518463a95167d862b2cfc", 0x16}], 0x0, 0x0) 14:30:38 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0xfff, 0x0, 0x0, "70af8919c4de88f3"}) [ 345.567923][ T26] audit: type=1804 audit(1587133838.190:105): pid=10316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/70/file0" dev="sda1" ino=16240 res=1 14:30:38 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f00000007c0)=""/233, 0xe9}], 0x3, 0x0) [ 345.615773][T10317] FAT-fs (loop4): bogus logical sector size 6213 [ 345.644453][T10317] FAT-fs (loop4): Can't find a valid FAT filesystem 14:30:40 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:40 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @random="f3e2fce0f94b"}, {@broadcast, @current}}}, 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) creat(0x0, 0x0) 14:30:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='autogroup\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) splice(r1, 0x0, r0, 0x0, 0x81420000a77, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x17) 14:30:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:40 executing program 5: clone(0x5582a000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:30:41 executing program 3: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) request_key(&(0x7f0000001280)='asymmetric\x00', &(0x7f00000012c0)={'syz', 0x3}, &(0x7f0000001300)='GPL\x00', r1) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) request_key(&(0x7f0000001280)='asymmetric\x00', &(0x7f00000012c0)={'syz', 0x3}, &(0x7f0000001300)='GPL\x00', r2) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) request_key(&(0x7f0000001280)='asymmetric\x00', &(0x7f00000012c0)={'syz', 0x3}, &(0x7f0000001300)='GPL\x00', r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) [ 348.382996][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 348.383011][ T26] audit: type=1804 audit(1587133841.010:111): pid=10362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/72/file0" dev="sda1" ino=16262 res=1 14:30:41 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 348.461229][T10368] IPVS: ftp: loaded support on port[0] = 21 [ 348.516218][ T26] audit: type=1804 audit(1587133841.010:112): pid=10362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/72/file0" dev="sda1" ino=16262 res=1 [ 348.557019][T10368] IPVS: ftp: loaded support on port[0] = 21 14:30:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) creat(0x0, 0x0) [ 348.597326][ T26] audit: type=1804 audit(1587133841.220:113): pid=10394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/73/file0" dev="sda1" ino=16245 res=1 14:30:41 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 348.628345][ T26] audit: type=1804 audit(1587133841.220:114): pid=10394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/73/file0" dev="sda1" ino=16245 res=1 14:30:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r1) getpeername(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{}, "b84804fb50f8d5e8", "afb0683bf20e95cc9639a49e840b3d60", "b44490f2", "8fede7665a85961a"}, 0x28) [ 348.744777][ T26] audit: type=1804 audit(1587133841.370:115): pid=10421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/74/file0" dev="sda1" ino=15710 res=1 [ 348.773322][ T26] audit: type=1804 audit(1587133841.400:116): pid=10421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/74/file0" dev="sda1" ino=15710 res=1 14:30:43 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='s'], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a400000800000000000003b6d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 14:30:43 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000600)={@val, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0xffe}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "bc0ebf", 0x2c, 0x6, 0x0, @remote, @private0, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}}, 0x6a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:43 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) lremovexattr(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 351.399469][ T26] audit: type=1804 audit(1587133844.020:117): pid=10456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/75/file0" dev="sda1" ino=16272 res=1 14:30:44 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) [ 351.478719][T10461] EXT4-fs (loop3): Can't read superblock on 2nd try [ 351.500439][ T26] audit: type=1804 audit(1587133844.050:118): pid=10456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/75/file0" dev="sda1" ino=16272 res=1 14:30:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) [ 351.660334][ T26] audit: type=1804 audit(1587133844.280:119): pid=10480 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/76/file0" dev="sda1" ino=16277 res=1 14:30:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x5, 0x84, 0xffffffffffffffff, 0xfffffff9}, 0xfffffffffffffecd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) sendmsg$inet(r2, &(0x7f0000002380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfc0}, {&(0x7f00000021c0)="87b16b1ae6166e9171eb09551c1877d4176df0824040c9e592f87f94e563a5477ff5b07e7a36a6749d2f80b58ed21b8a6462a9fae22ca75958af9d1375b5fbc4cbd51c0d4d64bbed0765d2d121d95813501323d87063f998fbae65967dca12a5a2b13a4fae394662440b06605b827397ab4af6031e09e91f23bd837a296e92304ba666468b68883c337a16c2f7c577095397b6902c8cd293816b451c9afd28f9f839b813a9820e4b687d676f821d44ac4c7f7640e2867628af051d02573ccfaae69a4af21517066d4f9e3fe3ce2f043a5b63e6d42f9bb6e0500a0784fa99be079ac2202cf018fbf0", 0xe8}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1100000000000000000000100100000000000000000000001400000000000000000000000200000001000100000000001100000000000000000000000100000005000000000000004800000000000000000000000700000044104b70800000010000000200000000ae070ffaac1414bb00000020acf701000000000000552710edf748f77c3f4f27e600890730e0000001110000000000000000000000010000000840000000000000"], 0xa9}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r3, 0x0, &(0x7f000089b000)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) write$cgroup_int(r4, &(0x7f0000002180)=0x2ed, 0x12) 14:30:44 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 351.726485][ T26] audit: type=1804 audit(1587133844.290:120): pid=10480 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/76/file0" dev="sda1" ino=16277 res=1 [ 351.765649][T10482] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 14:30:44 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 351.777124][T10482] ref_ctr decrement failed for inode: 0x3f88 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad [ 351.800574][T10482] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 351.817949][T10482] ref_ctr decrement failed for inode: 0x3f88 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad 14:30:47 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc", 0x9}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x5, 0x84, 0xffffffffffffffff, 0xfffffff9}, 0xfffffffffffffecd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) sendmsg$inet(r2, &(0x7f0000002380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfc0}, {&(0x7f00000021c0)="87b16b1ae6166e9171eb09551c1877d4176df0824040c9e592f87f94e563a5477ff5b07e7a36a6749d2f80b58ed21b8a6462a9fae22ca75958af9d1375b5fbc4cbd51c0d4d64bbed0765d2d121d95813501323d87063f998fbae65967dca12a5a2b13a4fae394662440b06605b827397ab4af6031e09e91f23bd837a296e92304ba666468b68883c337a16c2f7c577095397b6902c8cd293816b451c9afd28f9f839b813a9820e4b687d676f821d44ac4c7f7640e2867628af051d02573ccfaae69a4af21517066d4f9e3fe3ce2f043a5b63e6d42f9bb6e0500a0784fa99be079ac2202cf018fbf0", 0xe8}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1100000000000000000000100100000000000000000000001400000000000000000000000200000001000100000000001100000000000000000000000100000005000000000000004800000000000000000000000700000044104b70800000010000000200000000ae070ffaac1414bb00000020acf701000000000000552710edf748f77c3f4f27e600890730e0000001110000000000000000000000010000000840000000000000"], 0xa9}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r3, 0x0, &(0x7f000089b000)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) write$cgroup_int(r4, &(0x7f0000002180)=0x2ed, 0x12) 14:30:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:47 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:30:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x5, 0x84, 0xffffffffffffffff, 0xfffffff9}, 0xfffffffffffffecd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) sendmsg$inet(r2, &(0x7f0000002380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfc0}, {&(0x7f00000021c0)="87b16b1ae6166e9171eb09551c1877d4176df0824040c9e592f87f94e563a5477ff5b07e7a36a6749d2f80b58ed21b8a6462a9fae22ca75958af9d1375b5fbc4cbd51c0d4d64bbed0765d2d121d95813501323d87063f998fbae65967dca12a5a2b13a4fae394662440b06605b827397ab4af6031e09e91f23bd837a296e92304ba666468b68883c337a16c2f7c577095397b6902c8cd293816b451c9afd28f9f839b813a9820e4b687d676f821d44ac4c7f7640e2867628af051d02573ccfaae69a4af21517066d4f9e3fe3ce2f043a5b63e6d42f9bb6e0500a0784fa99be079ac2202cf018fbf0", 0xe8}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1100000000000000000000100100000000000000000000001400000000000000000000000200000001000100000000001100000000000000000000000100000005000000000000004800000000000000000000000700000044104b70800000010000000200000000ae070ffaac1414bb00000020acf701000000000000552710edf748f77c3f4f27e600890730e0000001110000000000000000000000010000000840000000000000"], 0xa9}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r3, 0x0, &(0x7f000089b000)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) write$cgroup_int(r4, &(0x7f0000002180)=0x2ed, 0x12) 14:30:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 354.492777][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 354.492796][ T26] audit: type=1804 audit(1587133847.120:125): pid=10511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/79/file0" dev="sda1" ino=16220 res=1 14:30:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 354.633727][ T26] audit: type=1804 audit(1587133847.160:126): pid=10511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/79/file0" dev="sda1" ino=16220 res=1 14:30:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x5, 0x84, 0xffffffffffffffff, 0xfffffff9}, 0xfffffffffffffecd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) sendmsg$inet(r2, &(0x7f0000002380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfc0}, {&(0x7f00000021c0)="87b16b1ae6166e9171eb09551c1877d4176df0824040c9e592f87f94e563a5477ff5b07e7a36a6749d2f80b58ed21b8a6462a9fae22ca75958af9d1375b5fbc4cbd51c0d4d64bbed0765d2d121d95813501323d87063f998fbae65967dca12a5a2b13a4fae394662440b06605b827397ab4af6031e09e91f23bd837a296e92304ba666468b68883c337a16c2f7c577095397b6902c8cd293816b451c9afd28f9f839b813a9820e4b687d676f821d44ac4c7f7640e2867628af051d02573ccfaae69a4af21517066d4f9e3fe3ce2f043a5b63e6d42f9bb6e0500a0784fa99be079ac2202cf018fbf0", 0xe8}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1100000000000000000000100100000000000000000000001400000000000000000000000200000001000100000000001100000000000000000000000100000005000000000000004800000000000000000000000700000044104b70800000010000000200000000ae070ffaac1414bb00000020acf701000000000000552710edf748f77c3f4f27e600890730e0000001110000000000000000000000010000000840000000000000"], 0xa9}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r3, 0x0, &(0x7f000089b000)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) write$cgroup_int(r4, &(0x7f0000002180)=0x2ed, 0x12) [ 354.712254][T10505] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 354.719528][ T26] audit: type=1804 audit(1587133847.340:127): pid=10523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/80/file0" dev="sda1" ino=16285 res=1 [ 354.726847][T10505] ref_ctr decrement failed for inode: 0x3f9a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001cea4190 14:30:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x5, 0x84, 0xffffffffffffffff, 0xfffffff9}, 0xfffffffffffffecd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x81, 0x7, 0x5}, 0x1f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) close(r2) sendmsg$inet(r2, &(0x7f0000002380)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfc0}, {&(0x7f00000021c0)="87b16b1ae6166e9171eb09551c1877d4176df0824040c9e592f87f94e563a5477ff5b07e7a36a6749d2f80b58ed21b8a6462a9fae22ca75958af9d1375b5fbc4cbd51c0d4d64bbed0765d2d121d95813501323d87063f998fbae65967dca12a5a2b13a4fae394662440b06605b827397ab4af6031e09e91f23bd837a296e92304ba666468b68883c337a16c2f7c577095397b6902c8cd293816b451c9afd28f9f839b813a9820e4b687d676f821d44ac4c7f7640e2867628af051d02573ccfaae69a4af21517066d4f9e3fe3ce2f043a5b63e6d42f9bb6e0500a0784fa99be079ac2202cf018fbf0", 0xe8}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="1100000000000000000000100100000000000000000000001400000000000000000000000200000001000100000000001100000000000000000000000100000005000000000000004800000000000000000000000700000044104b70800000010000000200000000ae070ffaac1414bb00000020acf701000000000000552710edf748f77c3f4f27e600890730e0000001110000000000000000000000010000000840000000000000"], 0xa9}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r3, 0x0, &(0x7f000089b000)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) write$cgroup_int(r4, &(0x7f0000002180)=0x2ed, 0x12) 14:30:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 354.766473][ T26] audit: type=1804 audit(1587133847.380:128): pid=10523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/80/file0" dev="sda1" ino=16285 res=1 [ 354.785078][T10505] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 354.821486][T10505] ref_ctr decrement failed for inode: 0x3f9a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000001cea4190 [ 354.902369][ T26] audit: type=1804 audit(1587133847.530:129): pid=10530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/81/file0" dev="sda1" ino=16291 res=1 14:30:47 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:30:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 354.994195][ T26] audit: type=1804 audit(1587133847.570:130): pid=10530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/81/file0" dev="sda1" ino=16291 res=1 [ 355.125833][ T26] audit: type=1804 audit(1587133847.750:131): pid=10537 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/82/file0" dev="sda1" ino=16286 res=1 [ 355.185064][ T26] audit: type=1804 audit(1587133847.750:132): pid=10537 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/82/file0" dev="sda1" ino=16286 res=1 [ 355.221895][T10536] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 355.229999][T10536] ref_ctr decrement failed for inode: 0x3f9f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008e67d97c [ 355.242186][T10536] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 355.250313][T10536] ref_ctr decrement failed for inode: 0x3f9f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008e67d97c 14:30:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc", 0x9}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:50 executing program 5: socket$kcm(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x0, 0x29, 0x7, 0xf6, 0x0, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x1022, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6}, 0xffffffffffffffff, 0x3, r2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xff, 0x6, 0x8, 0x6, 0x0, 0xfffffffffffff001, 0x50020, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x1000, 0x8000000000000000, 0x3ff, 0x1, 0xfffffffffffffff7, 0x1, 0x7f}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) 14:30:50 executing program 4: socket$kcm(0xa, 0x122000000003, 0x11) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@in={0x2, 0x4e21, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 14:30:50 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:50 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:30:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 14:30:50 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, &(0x7f0000000280), 0xa8) recvmsg(r0, 0x0, 0x40008101) socketpair(0xb, 0x4, 0xfff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 357.656423][ T26] audit: type=1804 audit(1587133850.280:133): pid=10558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/83/file0" dev="sda1" ino=16318 res=1 14:30:50 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 357.709879][ T26] audit: type=1804 audit(1587133850.310:134): pid=10558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/83/file0" dev="sda1" ino=16318 res=1 [ 357.780285][T10547] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 357.798701][T10547] ref_ctr decrement failed for inode: 0x3fb9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c2bc264c [ 357.858945][T10547] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 357.895447][T10547] ref_ctr decrement failed for inode: 0x3fb9 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c2bc264c 14:30:50 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, &(0x7f0000000280), 0xa8) recvmsg(r0, 0x0, 0x40008101) socketpair(0xb, 0x4, 0xfff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:30:50 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:50 executing program 5: socket$kcm(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x0, 0x29, 0x7, 0xf6, 0x0, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x1022, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6}, 0xffffffffffffffff, 0x3, r2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xff, 0x6, 0x8, 0x6, 0x0, 0xfffffffffffff001, 0x50020, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x1000, 0x8000000000000000, 0x3ff, 0x1, 0xfffffffffffffff7, 0x1, 0x7f}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) 14:30:50 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) [ 359.171376][ T0] NOHZ: local_softirq_pending 08 14:30:53 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc", 0x9}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) 14:30:53 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x10}, 0x0) 14:30:53 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, &(0x7f0000000280), 0xa8) recvmsg(r0, 0x0, 0x40008101) socketpair(0xb, 0x4, 0xfff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:30:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 360.697826][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 360.697845][ T26] audit: type=1804 audit(1587133853.321:139): pid=10610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/86/file0" dev="sda1" ino=16332 res=1 14:30:53 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) [ 360.824118][ T26] audit: type=1804 audit(1587133853.321:140): pid=10610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/86/file0" dev="sda1" ino=16332 res=1 14:30:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x10}, 0x0) [ 360.926477][ T26] audit: type=1804 audit(1587133853.551:141): pid=10624 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/87/file0" dev="sda1" ino=16324 res=1 14:30:53 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:53 executing program 4: sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) [ 361.000373][ T26] audit: type=1804 audit(1587133853.551:142): pid=10624 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/87/file0" dev="sda1" ino=16324 res=1 14:30:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) [ 361.108394][ T26] audit: type=1804 audit(1587133853.731:143): pid=10631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/88/file0" dev="sda1" ino=16329 res=1 [ 361.194206][ T26] audit: type=1804 audit(1587133853.761:144): pid=10631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/88/file0" dev="sda1" ino=16329 res=1 [ 361.310636][T10639] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 361.324054][T10639] ref_ctr decrement failed for inode: 0x3da1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000003d3d0531 [ 361.345245][T10639] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 361.354090][T10639] ref_ctr decrement failed for inode: 0x3da1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000003d3d0531 14:30:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639", 0xe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:56 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:30:56 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a290930206040208000001028140", 0x1b}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$netlink(0x10, 0x3, 0xa) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 14:30:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1b) 14:30:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:30:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 363.728070][ T26] audit: type=1804 audit(1587133856.351:145): pid=10655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/89/file0" dev="sda1" ino=15905 res=1 14:30:56 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f005dd1fffffe100008700632177fbac141412e0000001c699da153f08a0e6e000003f08f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) [ 363.813700][T10659] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 363.825224][T10659] ref_ctr decrement failed for inode: 0x3e71 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad [ 363.825439][ T26] audit: type=1804 audit(1587133856.381:146): pid=10655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/89/file0" dev="sda1" ino=15905 res=1 14:30:56 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 363.852686][T10659] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 363.880138][T10659] ref_ctr decrement failed for inode: 0x3e71 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad [ 363.933361][ T26] audit: type=1804 audit(1587133856.561:147): pid=10672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/90/file0" dev="sda1" ino=15857 res=1 14:30:56 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 363.963369][ T26] audit: type=1804 audit(1587133856.591:148): pid=10672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/90/file0" dev="sda1" ino=15857 res=1 14:30:56 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:30:56 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002d0007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:30:56 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) [ 364.221356][T10675] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 364.236449][T10675] ref_ctr decrement failed for inode: 0x3de3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad [ 364.285606][T10675] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 364.313666][T10675] ref_ctr decrement failed for inode: 0x3de3 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e269fbad 14:30:59 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639", 0xe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:30:59 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000020353b15f7ffe40cefc0000000000000800010001000000090002000000eb0002000000321a92ebdde0e71e8c237ffccc1d31ee0b13eb1ea6e47ddc0f746c057e76bc90d0d6d670df100a0ee665140e13f1db66abc1a1d6b6210f5737f8b8e4f4886787781aab8878b2ac65cebc31af41c384604866005b7e1088cd3aeb0ba3ff083e1d37eb7b19d1d152991bf971e17e79a51c9a7d729b4e8f0facca54b6bac6abd9"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 14:30:59 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:30:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 14:30:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0}, 0x20040884) 14:30:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:30:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x9c) [ 366.932308][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 366.932327][ T26] audit: type=1804 audit(1587133859.561:153): pid=10718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/93/file0" dev="sda1" ino=16065 res=1 [ 366.980545][ T26] audit: type=1804 audit(1587133859.591:154): pid=10718 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/93/file0" dev="sda1" ino=16065 res=1 14:30:59 executing program 4: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0af3b4054b0bcfc33aa071") syz_genetlink_get_family_id$nl80211(0x0) [ 367.080055][T10707] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 367.091424][T10707] ref_ctr decrement failed for inode: 0x3f71 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d08ad254 [ 367.102766][T10707] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 367.111467][T10707] ref_ctr decrement failed for inode: 0x3f71 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d08ad254 14:30:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 14:30:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="f5dd47197d84cd07c5c41887d46ab4b137f5da03985181087460877217db7fa608abf481dbcf77d408b2681fe5570675f79cfd2ccefb5148b27eea47576f9fa5047134c0d91570ee5b4a7a38c9b38e6fbb395d25163f868892834445055d6d2b15dc8bf787bc330624a2dd710ce0adb4f12d48c8186ddd704e935f001f", 0x7d}, {&(0x7f0000001240)='\n', 0x1}, {&(0x7f00000012c0)="39dcf54c52082a86de4c9d93019ed5faebfe655546b739324204cc9afc4b32a9532622dcfa9fdae1b4aa93602f22be30f2e908399e16d9b9f8cad805839953caf5b85f33a3a83c1a38988947770fd325c03908643b01fea5987b4aa844a4a08e52d6", 0x62}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 14:31:00 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x0) [ 367.370507][T10736] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 367.378555][T10736] ref_ctr decrement failed for inode: 0x3f31 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d08ad254 [ 367.415829][T10736] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 367.428257][T10736] ref_ctr decrement failed for inode: 0x3f31 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000d08ad254 14:31:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="c9bdbf9e397e4c5b819b3bf444d04615", 0x10}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2000a890}], 0x1}, 0x0) 14:31:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639", 0xe}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 14:31:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x348, 0x0, 0x0, 0x0, 0x190, 0x0, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x2b0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4ba3a94a2d2393e3182f64694d7d05fb478c8f56627a5cf905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x4}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 14:31:02 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:31:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x9c) 14:31:02 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x36}, [@call={0x4e}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 370.043532][ T26] audit: type=1804 audit(1587133862.671:155): pid=10777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/94/file0" dev="sda1" ino=16348 res=1 [ 370.134037][ T26] audit: type=1804 audit(1587133862.671:156): pid=10777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/94/file0" dev="sda1" ino=16348 res=1 [ 370.162943][T10765] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 370.182012][T10765] ref_ctr decrement failed for inode: 0x3fdd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0291e61 14:31:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x25f, &(0x7f0000000340)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19e8a36fbc883b23}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xfeffffff, 0xe, 0x0, &(0x7f0000000300)="24f9e9a6bae9516cc92c4a17c9a9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14:31:02 executing program 4: close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 370.225855][T10765] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 370.254879][T10765] ref_ctr decrement failed for inode: 0x3fdd offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0291e61 14:31:03 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000001cc0)={&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}, 0x0) 14:31:03 executing program 4: close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 370.427112][T10793] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 370.436003][T10793] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 370.490193][T10793] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 370.498761][T10793] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 370.552188][T10794] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 370.566974][T10794] ref_ctr decrement failed for inode: 0x3fde offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0291e61 [ 370.602564][T10794] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 370.610884][T10794] ref_ctr decrement failed for inode: 0x3fde offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000e0291e61 14:31:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ff", 0x10}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:05 executing program 4: close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x36}, [@call={0x15}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 14:31:05 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:05 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 14:31:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:05 executing program 5: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket(0x10, 0x3, 0xc) write(r3, 0x0, 0x0) close(r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 14:31:05 executing program 4: close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 373.148206][ T26] audit: type=1804 audit(1587133865.771:157): pid=10827 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/95/file0" dev="sda1" ino=16369 res=1 [ 373.181771][T10811] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 373.193347][T10811] ref_ctr decrement failed for inode: 0x3ff2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006abca177 [ 373.217773][T10811] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 373.227341][ T26] audit: type=1804 audit(1587133865.771:158): pid=10827 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/95/file0" dev="sda1" ino=16369 res=1 [ 373.233978][T10811] ref_ctr decrement failed for inode: 0x3ff2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006abca177 14:31:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x0, 0x40, 0x2c, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001c00)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x8, 0x1, 0x78, 0x6, 0x1}, 0xc) getgid() sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) 14:31:06 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:06 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 373.560376][T10841] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 373.577783][T10841] ref_ctr decrement failed for inode: 0x3ff6 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000be13f573 [ 373.607518][T10841] ref_ctr going negative. vaddr: 0x20002004, curr val: 0, delta: -1 [ 373.626783][T10841] ref_ctr decrement failed for inode: 0x3ff6 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000be13f573 14:31:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ff", 0x10}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:08 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 14:31:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:08 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 14:31:08 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x0, 0x40, 0x2c, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001c00)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x8, 0x1, 0x78, 0x6, 0x1}, 0xc) getgid() sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) 14:31:08 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 376.168465][ T26] audit: type=1804 audit(1587133868.791:159): pid=10874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/96/file0" dev="sda1" ino=16379 res=1 14:31:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 376.221415][ T26] audit: type=1804 audit(1587133868.821:160): pid=10874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/96/file0" dev="sda1" ino=16379 res=1 14:31:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:09 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ff", 0x10}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:11 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 14:31:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x0, 0x40, 0x2c, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001c00)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0x8, 0x1, 0x78, 0x6, 0x1}, 0xc) getgid() sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) 14:31:11 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 379.195139][ T26] audit: type=1804 audit(1587133871.822:161): pid=10922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/97/file0" dev="sda1" ino=16377 res=1 14:31:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 379.252286][ T26] audit: type=1804 audit(1587133871.852:162): pid=10922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/97/file0" dev="sda1" ino=16377 res=1 14:31:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:12 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 14:31:14 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4", 0x11}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:14 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:14 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 14:31:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 14:31:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:14 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000020353b15f7ffe40cefc0000000000000800010001000000090002000000eb0012000000321a92ebdde0e71e8c237ffccc1d31ee0b13eb1ea6e47ddc0f746c057e76bc90d0d6d670df100a0ee65f140e13f1db66abc1a1d6b6210f5737f8b8e4f4886787781aab8878b2ac65cebcfd31af41c384604866005b7e1088cd3aeb0ba3ff083e1d37eb7b19d1d152991bf9e73583a4a51c9a7d729b4e8f0facca54b6bac6ab"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 14:31:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x14, &(0x7f000095dff8), &(0x7f0000000000)=0x4) 14:31:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 382.351628][ T26] audit: type=1804 audit(1587133874.982:163): pid=10974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/98/file0" dev="sda1" ino=16375 res=1 [ 382.407435][ T26] audit: type=1804 audit(1587133874.982:164): pid=10974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/98/file0" dev="sda1" ino=16375 res=1 14:31:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:15 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) [ 382.511534][T10982] sctp: [Deprecated]: syz-executor.5 (pid 10982) Use of int in max_burst socket option. [ 382.511534][T10982] Use struct sctp_assoc_value instead 14:31:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, r2}, 0xc) 14:31:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4", 0x11}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:17 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:31:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="c9bdbf9e397e4c5b819b3bf444d04615ee014b716f911d2f51952d7e67a35d50732a0b24c871aa9ff059732ba1c0041b6f3efe7c5e94b821668fc1b67239036b655c0b6cc6f29aea7894b59b9c45e262ad4981b63f4e86ea39a91dc4196e6185ba2b5ecef5a4d9e9d879b2082df4faea22185e7e6e7d6e95bd24b6295753bb40", 0x80}, {&(0x7f0000000100)="f5dd47197d84cd07c5c41887d46ab4b137f5da03985181087460877217db7fa608abf481dbcf77d408b2681fe5570675f79cfd2ccefb5148b27eea47576f9fa5047134c0d91570ee5b4a7a38c9b38e6fbb395d25163f868892834445055d6d2b15dc8bf787bc330624a2dd710ce0adb4f12d48c8186ddd704e935f001f", 0x7d}, {&(0x7f0000001240)="0a9e089c9fb940fd0e024070124bb052250d512965af9ca910a401a69a256bc100cd0bded921ae1d6047f1b1cbcfedd830416efced6b1b950681685f8a0679c055", 0x41}, {&(0x7f00000012c0)="39dcf54c52082a86de4c9d93019ed5faebfe655546b739324204cc9afc4b32a9532622dcfa9fdae1b4aa93602f22be30f2e908399e16d9b9f8cad805839953caf5b85f33a3a83c1a38988947770fd325c039", 0x52}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 385.443125][ T26] audit: type=1804 audit(1587133878.072:165): pid=11018 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/99/file0" dev="sda1" ino=16369 res=1 [ 385.520729][ T26] audit: type=1804 audit(1587133878.112:166): pid=11018 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/99/file0" dev="sda1" ino=16369 res=1 14:31:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:31:18 executing program 5: perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20004004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 14:31:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc4ea1d75d3066d52dbb55d0e331a5fb33abadd3a0c218078be8d75aabad71bfc70281251ab132740a4781353d114e024762f07612b1c3d686f1264c8fc62eaf2aea3cfda8c226f236b2b017b569762fa39884bd1dc08eb9d6c91b9364b7bcf572d0cb61794986331bdc2fc568652ea4e96ceb14693c84382d3b09a196d1c9"], &(0x7f0000000280)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x8000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="850000006d00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c61612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707df94a4f4d5fc79c987d669f2b1faca0f9d9924be41a9169bdfaf16d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55545a34effa077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f91f5d822175ed60ab386d94af98af1da2b59525f8fe3b28d7e53c78fbfe5ab0255f347160ec8343e1494d3a63e57a15cf10453f6c0bb13b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c0bcd4b09012175484135f0e519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957adbec548552b571bed5647223c78a996eca313eaa66580ae7b813071cbb17d9f37282462f03de147c0d497c61433c6ccc35601eef97ee611be8c97f449cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7c504b24e28aa253cbc8edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc6825a3a3d5b754df23175e2ce8b03bf3e3c033e54e4ca9efd27b751cdb05502ff038bbb33cdad17262947cc8098e9002d212c5f3731928c8474d983ba9935e222397d4733bad338401c485048ca0db21c73a854d52adce7f0f6c2efa4ac2f38fc044a7aafa6545f74aff04574fc9acdefd10a03f2e4b769bcfa18757084addd034917015f1d9924b77f02f3a7bea1ffffa2e5f4f9dea0bf4d77e433600ffeb4adc10ed2306768c6865b6485e9510da1b47112c7edc643c3d9a100b1417d9204f5e0e0aa3c50a741f206930103c759a4c86bd278de4d7dc6923884b6447afebf66ec3a95a83"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x0, 'memory', 0xc}]}, 0xfdef) 14:31:21 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4", 0x11}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 14:31:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 14:31:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x8000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x0, 'memory', 0xc}]}, 0xfdef) 14:31:21 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r0, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 14:31:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb8aaaaaaaaabb81000001"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 14:31:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:31:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 388.560499][ T26] audit: type=1804 audit(1587133881.192:167): pid=11071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/100/file0" dev="sda1" ino=16372 res=1 [ 388.592576][T11071] ================================================================== [ 388.600720][T11071] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 388.608940][T11071] [ 388.611278][T11071] write to 0xffff8881212793c0 of 8 bytes by task 11062 on cpu 1: [ 388.620484][T11071] writeback_single_inode+0x1fc/0x2f0 [ 388.625961][T11071] sync_inode_metadata+0x75/0xa0 [ 388.630910][T11071] ext4_sync_file+0x47a/0x8b0 [ 388.635599][T11071] vfs_fsync_range+0x7c/0x150 14:31:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 388.639623][ T26] audit: type=1804 audit(1587133881.212:168): pid=11071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir550665659/syzkaller.fUgMvi/100/file0" dev="sda1" ino=16372 res=1 [ 388.640314][T11071] ext4_buffered_write_iter+0x211/0x280 [ 388.668385][T11071] ext4_file_write_iter+0xf4/0xd30 [ 388.673515][T11071] do_iter_readv_writev+0x4a7/0x5d0 [ 388.678831][T11071] do_iter_write+0x137/0x3a0 [ 388.683436][T11071] vfs_iter_write+0x56/0x80 [ 388.687954][T11071] iter_file_splice_write+0x530/0x830 [ 388.693334][T11071] direct_splice_actor+0x97/0xb0 [ 388.698278][T11071] splice_direct_to_actor+0x22f/0x540 [ 388.703650][T11071] do_splice_direct+0x152/0x1d0 14:31:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 388.708504][T11071] do_sendfile+0x380/0x800 [ 388.712931][T11071] __x64_sys_sendfile64+0x121/0x140 [ 388.718139][T11071] do_syscall_64+0xc7/0x3b0 [ 388.722653][T11071] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 388.728540][T11071] [ 388.730872][T11071] read to 0xffff8881212793c0 of 8 bytes by task 11071 on cpu 0: [ 388.738504][T11071] __mark_inode_dirty+0xb6/0x940 [ 388.743440][T11071] mark_buffer_dirty+0x28b/0x2b0 [ 388.748378][T11071] __block_commit_write.isra.0+0x11d/0x170 [ 388.754184][T11071] block_write_end+0x6d/0x140 14:31:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x9c) [ 388.758855][T11071] generic_write_end+0x8c/0x1f0 [ 388.763710][T11071] ext4_da_write_end+0x162/0x690 [ 388.768648][T11071] generic_perform_write+0x1d7/0x320 [ 388.773934][T11071] ext4_buffered_write_iter+0x14e/0x280 [ 388.779482][T11071] ext4_file_write_iter+0xf4/0xd30 [ 388.784599][T11071] do_iter_readv_writev+0x4a7/0x5d0 [ 388.789795][T11071] do_iter_write+0x137/0x3a0 [ 388.794386][T11071] vfs_iter_write+0x56/0x80 [ 388.798888][T11071] iter_file_splice_write+0x530/0x830 [ 388.804265][T11071] direct_splice_actor+0x97/0xb0 [ 388.809211][T11071] splice_direct_to_actor+0x22f/0x540 [ 388.814579][T11071] do_splice_direct+0x152/0x1d0 [ 388.819464][T11071] do_sendfile+0x380/0x800 [ 388.823878][T11071] __x64_sys_sendfile64+0x121/0x140 [ 388.829081][T11071] do_syscall_64+0xc7/0x3b0 [ 388.833588][T11071] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 388.839466][T11071] [ 388.841790][T11071] Reported by Kernel Concurrency Sanitizer on: [ 388.847952][T11071] CPU: 0 PID: 11071 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 388.856613][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.866666][T11071] ================================================================== [ 388.874727][T11071] Kernel panic - not syncing: panic_on_warn set ... [ 388.881317][T11071] CPU: 0 PID: 11071 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 388.889984][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.900034][T11071] Call Trace: [ 388.903327][T11071] dump_stack+0x11d/0x187 [ 388.907665][T11071] panic+0x210/0x640 [ 388.911568][T11071] ? vprintk_func+0x89/0x13a [ 388.916174][T11071] kcsan_report.cold+0xc/0x1a [ 388.920859][T11071] kcsan_setup_watchpoint+0x3fb/0x440 [ 388.926241][T11071] __mark_inode_dirty+0xb6/0x940 [ 388.931191][T11071] mark_buffer_dirty+0x28b/0x2b0 [ 388.936130][T11071] __block_commit_write.isra.0+0x11d/0x170 [ 388.941942][T11071] block_write_end+0x6d/0x140 [ 388.946635][T11071] generic_write_end+0x8c/0x1f0 [ 388.951503][T11071] ext4_da_write_end+0x162/0x690 [ 388.956470][T11071] ? ext4_write_end+0x800/0x800 [ 388.961325][T11071] generic_perform_write+0x1d7/0x320 [ 388.966624][T11071] ext4_buffered_write_iter+0x14e/0x280 [ 388.972173][T11071] ext4_file_write_iter+0xf4/0xd30 [ 388.977302][T11071] ? common_file_perm+0x1d1/0x490 [ 388.982342][T11071] do_iter_readv_writev+0x4a7/0x5d0 [ 388.987547][T11071] do_iter_write+0x137/0x3a0 [ 388.992137][T11071] ? __kmalloc+0x278/0x640 [ 388.996562][T11071] vfs_iter_write+0x56/0x80 [ 389.001071][T11071] iter_file_splice_write+0x530/0x830 [ 389.006457][T11071] ? page_cache_pipe_buf_release+0xf0/0xf0 [ 389.012289][T11071] direct_splice_actor+0x97/0xb0 [ 389.017249][T11071] splice_direct_to_actor+0x22f/0x540 [ 389.022643][T11071] ? generic_pipe_buf_nosteal+0x20/0x20 [ 389.028197][T11071] do_splice_direct+0x152/0x1d0 [ 389.033051][T11071] do_sendfile+0x380/0x800 [ 389.037476][T11071] __x64_sys_sendfile64+0x121/0x140 [ 389.042687][T11071] do_syscall_64+0xc7/0x3b0 [ 389.047200][T11071] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 389.053091][T11071] RIP: 0033:0x45c889 [ 389.057008][T11071] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.076727][T11071] RSP: 002b:00007f392cdfec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.085144][T11071] RAX: ffffffffffffffda RBX: 00007f392cdff6d4 RCX: 000000000045c889 [ 389.093114][T11071] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 389.101085][T11071] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 389.109055][T11071] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff [ 389.117025][T11071] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 000000000076bfac [ 389.126587][T11071] Kernel Offset: disabled [ 389.130921][T11071] Rebooting in 86400 seconds..