[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c[ 29.434081] kauditd_printk_skb: 9 callbacks suppressed . [ 29.434094] audit: type=1800 audit(1540024022.215:33): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 29.462159] audit: type=1800 audit(1540024022.215:34): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 30.083876] audit: type=1400 audit(1540024022.865:35): avc: denied { map } for pid=5495 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.70' (ECDSA) to the list of known hosts. 2018/10/20 08:27:09 fuzzer started syzkaller login: [ 36.770744] audit: type=1400 audit(1540024029.555:36): avc: denied { map } for pid=5506 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/10/20 08:27:12 dialing manager at 10.128.0.26:38117 2018/10/20 08:27:12 syscalls: 1 2018/10/20 08:27:12 code coverage: enabled 2018/10/20 08:27:12 comparison tracing: enabled 2018/10/20 08:27:12 setuid sandbox: enabled 2018/10/20 08:27:12 namespace sandbox: enabled 2018/10/20 08:27:12 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/20 08:27:12 fault injection: enabled 2018/10/20 08:27:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/20 08:27:12 net packed injection: enabled 2018/10/20 08:27:12 net device setup: enabled 08:30:13 executing program 0: [ 220.425320] audit: type=1400 audit(1540024213.205:37): avc: denied { map } for pid=5522 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14739 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 220.520885] IPVS: ftp: loaded support on port[0] = 21 08:30:13 executing program 1: [ 220.764735] IPVS: ftp: loaded support on port[0] = 21 08:30:13 executing program 2: [ 221.078126] IPVS: ftp: loaded support on port[0] = 21 08:30:14 executing program 3: [ 221.731169] IPVS: ftp: loaded support on port[0] = 21 08:30:14 executing program 4: [ 222.061543] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.090312] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.098164] device bridge_slave_0 entered promiscuous mode [ 222.248117] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.269953] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.277374] device bridge_slave_1 entered promiscuous mode [ 222.280635] IPVS: ftp: loaded support on port[0] = 21 [ 222.423216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.544571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:30:15 executing program 5: [ 222.716121] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.739914] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.759724] device bridge_slave_0 entered promiscuous mode [ 222.859747] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.866214] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.890688] device bridge_slave_1 entered promiscuous mode [ 222.911908] IPVS: ftp: loaded support on port[0] = 21 [ 223.019716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.033065] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.044410] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.055940] device bridge_slave_0 entered promiscuous mode [ 223.066748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.169805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.186071] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.200486] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.207968] device bridge_slave_1 entered promiscuous mode [ 223.233202] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.411619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.491489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.568265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.749067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.884459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.899705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.919020] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.939888] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.947330] device bridge_slave_0 entered promiscuous mode [ 223.956743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.966280] team0: Port device team_slave_0 added [ 224.013737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.032177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.039346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.058336] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.080669] team0: Port device team_slave_1 added [ 224.088712] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.111389] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.118852] device bridge_slave_1 entered promiscuous mode [ 224.140558] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.251518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.272119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.293102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.316802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.357807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.387094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.470066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.477215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.487251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.536207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.546926] team0: Port device team_slave_0 added [ 224.647533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.669116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.690443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.711539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.730013] team0: Port device team_slave_1 added [ 224.796547] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.809924] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.817329] device bridge_slave_0 entered promiscuous mode [ 224.836123] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.849343] team0: Port device team_slave_0 added [ 224.864134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.906745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.930146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.960898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.970779] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.978213] team0: Port device team_slave_1 added [ 224.993460] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.011621] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.019075] device bridge_slave_1 entered promiscuous mode [ 225.031730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.080685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.087815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.101125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.131751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.148389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.173803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.192820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.219984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.228225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.242153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.278463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.300859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.324712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.336067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.354590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.363245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.384210] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.413995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.426153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.443173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.454097] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.461497] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.470645] device bridge_slave_0 entered promiscuous mode [ 225.477739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.493077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.533419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.584582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.610639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.622881] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.629252] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.637714] device bridge_slave_1 entered promiscuous mode [ 225.741592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.783670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.828445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.860321] team0: Port device team_slave_0 added [ 225.888066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.954428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.974519] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 225.993957] team0: Port device team_slave_1 added [ 226.118208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.155966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.174763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.189987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.197948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.259902] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.339784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.349325] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.355896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.362977] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.369351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.380737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.389826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.397857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.418424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.495156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.521295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.529690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.656327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.675823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.690297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.731120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.743116] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.761830] team0: Port device team_slave_0 added [ 226.886321] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.892783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.899516] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.905900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.914837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.944304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.960428] team0: Port device team_slave_1 added [ 227.064552] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.090342] team0: Port device team_slave_0 added [ 227.103213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.121150] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.127534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.134238] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.140639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.168228] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.188389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.200279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.224226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.232502] team0: Port device team_slave_1 added [ 227.240076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.286685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.296397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.347358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.383624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.410297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.418411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.488898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.511123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.520396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.544290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.695173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.710581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.720695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.736820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.750271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.810777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.818485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.828200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.233556] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.240018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.246700] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.253138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.277648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.739830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.008493] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.014941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.021654] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.028018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.044693] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.297869] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.304317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.311064] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.317446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.333386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.820621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.831331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.830609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.304898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.449997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.476072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.800581] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.806921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.818933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.887624] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.963359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.253063] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.368188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.455338] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.469667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.484773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.495179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.511397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.520383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.919820] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.929052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.991533] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.266555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.451411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.460537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.490395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.551388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.761904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.951166] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.016904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.231378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.238142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.250471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.561249] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.576913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.592582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.685016] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.059139] 8021q: adding VLAN 0 to HW filter on device team0 08:30:29 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @random}]}) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='ip_vti0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffe000/0x2000)=nil, 0x3, 0x0, 0x24, &(0x7f0000fff000/0x1000)=nil, 0x4}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x5}]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000840)) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000440)=0xab) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000000c0)="64f136d9f0440f20c066350b000000440f22c00f013a260f0766b9800000c00f326635002000000f30f30f52542edc670b0f01c80f848e00", 0x38}], 0x1, 0x8, &(0x7f00000004c0)=[@dstype0={0x6, 0xa}], 0x1) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000340)=""/109) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000100)) [ 236.420864] hrtimer: interrupt took 33413 ns [ 236.485223] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 08:30:29 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @random}]}) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='ip_vti0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffe000/0x2000)=nil, 0x3, 0x0, 0x24, &(0x7f0000fff000/0x1000)=nil, 0x4}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x5}]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000840)) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000440)=0xab) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000000c0)="64f136d9f0440f20c066350b000000440f22c00f013a260f0766b9800000c00f326635002000000f30f30f52542edc670b0f01c80f848e00", 0x38}], 0x1, 0x8, &(0x7f00000004c0)=[@dstype0={0x6, 0xa}], 0x1) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000340)=""/109) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000100)) 08:30:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b70000000000f6009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x98, &(0x7f0000000380)="9cc80004e3ff0000200000000000", &(0x7f00000003c0)=""/152, 0x8001}, 0x167) [ 236.965374] audit: type=1400 audit(1540024229.745:38): avc: denied { prog_load } for pid=6985 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 237.085726] audit: type=1400 audit(1540024229.865:39): avc: denied { prog_run } for pid=6985 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:30:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x802, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @rand_addr=0xdb08}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)={0x0, @aes256, 0x1, "5433f49a4ea4c6e1"}) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) 08:30:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaacc0, &(0x7f00000000c0)=[{&(0x7f0000000100)="0001000000ff000000000000c9030000e400693b58300800000000ccffffd4a9a759000000200000000100ffffffff006e51be5c0000ffff53ef753194acb791ac2d05e1ebbb141b6238afd96dd498da901688590856d28bba95dc842fe28df6cd1e", 0x62, 0x400}], 0x0, &(0x7f0000000340)=ANY=[]) 08:30:30 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0xfffffea4) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x7d, &(0x7f0000000000), 0x1) 08:30:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@local, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'ip6gre0\x00', r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x1}) 08:30:30 executing program 2: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x880, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", r0}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x8000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = getuid() fstat(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r7, r8, 0x400) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000000000000000"]) recvmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) write$cgroup_type(r4, &(0x7f0000001900)="746888646164656400", 0x9) write$binfmt_script(r5, &(0x7f0000001a40)={'#! ', './file0', [{0x20, 'fscontext'}, {0x20, 'POLICY_CHECK'}, {0x20, 'ntfs\x00'}, {0x20, 'func'}, {0x20, 'user\x00'}, {}, {0x20, "d13ff3d776"}, {0x20, 'fsuuid'}], 0xa, "7faa7c5ee26880a7aafa44c9d53676493207610c7737c1ba5a857373f6c60e76bc7bbd01117b8af86e1a11a4489c59317d91ff0ea8ff719f2ee809bfca88c2f0af9338c363821094b8574195a8fe278b92c03117871633b61cab33e33f71a753aa4302341dcb1a02e774f290258ac68d331431fd1ef1b04e34a0e67765184a7e1f78c5c0051764ee4142ad2afc69bc140dabdbfc7dea4b832f5c81700629893bcc8ca506ab5b28dc321a6f84b58438642dfe0ca993ef1aaed147bf9836dab66aa5fcd0a571738a6a82ca778e474009ccc2fdfe9eb5c1948d8641c4157ccafcbfb82c55bd875c2f3ede38cf4f5e3f53eb473142c5351e5859560d3fd512a609e2507de5ba8014e875d2d71070aad7ee6c97b80f13b5389dd43ae3495308b16650a9f2480b329a4fc4b28805897dc647eca6e3fc7b1758899e00c130972caae2971ab4518b264c6f1fcea86122872f5e3f86eead50bf82e41fcb06013c708a57cc00fcd323603a3e2c347e4812c517b1a0ae907f34f6faa80df04327092c8fffd64f45d5e2ed4325634bc50284fefc83a082e22d3c607ff22ad1b13ed77c2dbdae7e302dd4c4a10b7548c6f68bce825641bdd721adcdeeaf5bd1cd69134a967cc77c1f71a2509abb14ea8812ff940aa27c817279c1f1023bfddec848df6d19085ed6d469b8b689686b46d97c6e69c3935de2318fc0d99d1ceab66aa12113a49e5e8fed26dccf33f0c719b8b23602b94edd93c7bac6edf5c75ac045a3524de1151344ed117ddede370e6045d0bb21257a288ae653b3333286e2ee06ea153fe3890d1f96ade7c84d024eaa4eeb08241d80186f031e24b1294f47068c83f0a0eb15deea024d8fb93f2a8f1a0fd0d772e7d489d461084b5a22f598b2a7f23ed9d38e6d1c6b9291b080f2172802e770a686c07c684e547de25fe2534b5585cc0cc1ed3233bba691be7113aa821246e7d5a3b84f6fb047b5ebf75728207ca935fc76d50085c00b3f79e7f197cfc35e8f9e1023afdcae1d909301e9efb4d1007717de89c2f446337ed955f17c3f8bf245482a2d1509b1d0e6a2020c97c7c74a8298f2fe60e987383a1b027a4f0525ee56a54c09cc5d9c97b9cce9e2c10fd851e910b823f3d9636d2b3a78604a2438d4ea9357add711438cc73f736bbe50255a4d851de43254e0a4da106270651abd56495492ced03e625ce30520a6585bea24fdaf2e00d19554be9f399a9e221e17fd2ec78f58ac96f91603c8561364736363d888d9387d7b1d6d3be5aae6a721b7316f0520c0345019e6a9e9391ff2d9599a131a881ddb31bada7ac9517eb1fcac770cfb6b007321e10c6513a390dfb1834eb7722c6fb84b42d3a8f02a248ba7698e6f4dad16839104f4013922f5e2daf6cd8a1f9de773f5b1900ad3b96435b5b755fe749a7e0ca5218394fdcb80c22e7e626e7205d8ac4636869487ad77555ebe531805ee34bb370b340529ca5d4b1c6f3939ec221385ebce3ee75487fecd4a21d7e5f4b334a56652245e2e75753e126d1741049bb583ac7afb4350a7dfb198cc94c411187ac664e3a07e782d4d27d0bbde69eef3f15dbe643e2b17f6e8bf110e2026b7fd0b9398501bab9501f45f67c1694b0fdca39d9aa777f4e1006574a9441f84fe0201c264cfd0a06e6c8cd4ae0bcd70538e2edfcbfe00aff6ec87ca41c461bf319ba08cde50de8ca31999853d7f9d18f81149eb766f71c6a53e33aaef815ac19e46b5431a548e2ecae5c3d6339aa86842dc1b32ef2395a4812c391ee5c2677311e01a4fc1492f726ab60daf8a3b8362c062ccb2c84bb34205117602d4756537112a55475c8eec728cdfd698d108f34f8fdaefb97b434aaeed1a612d0f7afed74a10d1f034095ed2e83e77b39e4a99eec47e7529eb99d1feb31ff2b5c905b25f6b31b1bf357c619d455c3fa779e24f2cb60f78644e9c1ebb80f27c524dbf1184b5f7c04efa551e0a14f9b8f79762f831dfdbf0e5f7057b5624f54b19973cacfda2bdb4b4e0276fb7684dbeb59a0492a4a2e33556a309a9e103dfd2a69204542203215f6c4127e206d09c45e3b466c210ed326c36e19df01727423bb79c3bae64a850bde0e48c72391cb9a2a70e525ae29bd6c43161878f73d8b18ce48d6409ad8902106c4cd6cc7fdea11f12777fd681fc2ebb4b099cc3f9c4e967095c01487ecec1d5ee93d4b1c7e696f02786232dd76481e3a08a3037dc9cb06a7d025f7741fda55e80be704484d0e3fd3b24dc051d743183c7a2c514328b4c732c6af3490d88438a1b4b6f2ecfca34e221332c73256544def8f6bb11e94bbdb19e65ccfb541aebcbb06f82a24886de3d99c186f8fda6c97dac1c383c739213c602186e47ece4148056381c63aacc99345e87ae7db0995840602edc6abf5e47fe56822ec8a3bd1da999394488220f5006a261706d4215f47f1dd08053f9fcb85b56f2d58c790df9c50486fd4885191ba1a3790686bd414bed58885c815439822d4ceb2dd759e59d9929003128fde064853af05ad45c3cb7e2dc6a4c85c26b666b60d7d93e071c9dbb9a9ce82967135d6ea589f919408f17ac4b5d049a56051a41dfa9e0e4cb1e1ac5fef4185f01c15f869d17aac7b91d19d84da35415c6b00901e2fe8b4f17fe8f814510d1377ee999fcfd68ed56096f55f55266feb134e04037b69699638550ba8b3a86e22d9dc8215682a6591c8a2f09a447f3ba319062e70b4c14c05e430d78b9b1b57b0a25b109c6644cb15c0b6a5a3e6cf0091a17cabe4efd633a0ee9e24b1775dd907ab01b9eee7739d15b7fb33681f736570009148ba2536172f5233ad6437972ef8b67f2b4aff2b8ea066c55fedebd0a02536c7b653539df2604287af6ffce7ff713e9a1f738c7517ed2793c1af33d32aa132bddb20a183f457dd77e9b2324044d53565eb1491fc699ea2c3989d39c378c0050a94e150be1375ec1914df791d8d03db70fa8c14f3204c380a2e24c2686838c37b34e431401215850bc2e8524246fd3f367cf1c7961d40c4b45b9db8be1d3cbfc6750a359ffb06c24ca4543892718c598cbd168bddac371c807335b166bbdbec94d329f58e21e9b19308d8a63b7383e017360232f291aded374913f5b76c9ad96722436305895bfe54ff57589db1fd9e44cace0812ad75f742dc0430d31ee79c56dcd3d54443426766a7ee7f17ad99f86e7522464da5a709becb78260b1af621d7ab9b7c86100d7eb80d55416d96ead1f06afc3bce75dd79d81bb562eaaeab67231a04ebaf61a218f96e5b42c82bbcd227ce3546c88ac8893ccfdb8f4a55746500eba073bf45313f825ff8e5a9a8011196c4bf28f1267f5a00d7fa67fed592577393df4ad7d095da81d3c0b4c58ae816c9c3989346fd67e94089f0af071aa323f59d230f352a0db29e9015477730b3bde5ad5f62c5219f1fc3b7690a18dc16ecbb20cb1129dbf8f8fe2cc324f2ecabf7f29d4d0b703aad8b83208db2db7ccfeef0a744221bb7931dc62f6d64f2dae47962f6f229e1eae9f2e3a4448dc888d53b9258363771b8d5daf2fb9fbcaef5f8c41e7c450e3ad60be55800fc5daacab69026ef39f3924389d7e14a66837dbbcd51326411d047abd0c4146be414420f38577de54ad27f7f647b9e8983134bf249ad2112018878c519ad4c618ddea8482c4e2ae1e37b6de7dd0c2690f772be330bf3905beacc026fbc068f604bc985deded8d7ea184d2b5169070960c4e25760142c76e7105462b4f8299c2107a3ef76cda5f1fa751c879ecaefc302bc40e3dc50091f0a2f2f78c3ccd15b2bc9d8c03735be52d6fe0d764b1db834933076971cb797e73735ce316603f32722ef3b8d3bb0272ce6de8d2d85cfb94e7b82dff9d8bbf66be26eda3f5c8c576963d81b823f8aaaee7d2c8214e8ad269737ecd6ff44e251e8b8d403d3b8c5664e38acf6688ad29da74871d3202497aeee20a727d13ebaddc639223c853020b120f5302df00895247385d71769939a35b37bc481d63f9d8d223bfd6d7ff566b74792ba6622238ea089f4e745cbcb2c70552ad0958c42409ac34d38312104e19bc79eb7028da464d3af2bc870dc0fde7403e4a1a95060a0df33c425e6c2f8cb3112ced3bf90f2d747467bd2cfb604cdf197f773dfcf9c48f56427313d975017f7afae820696584160f4bf8dee74aa034f2144017380c158dc7301ffef23f5a51e802efb3f5c29742b2bb6820daec74095c6f7e7b4b6655289eab57a157a857f10334f1a89faacfca1939ee1a3f44d1f1ae77eab4f5c35fd60484ddff1b3b40860ee0041f5b316319d82b3c9fdefccb1b393115dafe31472d52ae453e21dcda01acf7be37294912dab851a5b4de4184df6d08e6a32f8d481f82b65afb90243967dd9f7f99d1aab7b3fd558636f1655c059a2e75f695c2ae7ad2ccef3222bc7a0747141888b6042d27789fd40ca84aaecc2d63e2224be5af59747b10c001cbcc3f2dff808f3b898c81ec48ea69556276469baa5d21fa1da9ff85947f44b84dfb21a6315d61c27fbea73d757a2af15745c3e88a7113049925bd1bcef7b804e20a082af6d1d97425faa20c69b4f1b409cfcae8f551152af6055eb124c0ae4b2a6f0ecc6deabc73b841b44745fc1f1a445754212ef800e665aa60bbbc2be5a67c11e7a46a1576b7691f44037465b564cc16c3d042e86d9126aae18d4b8820b63f3bfd8e6824cdaeba33bafcbf9717177dd76fe86525bed4b4097898de3e49aaa607fb75ab8a9fc72738f607557f7c4a1af7a3db5c6dee8e20d0d63e8a95c3717ebbc0e925fddc7e43eb88ef5aea22346b3669ea5187959ba1b1098a0bc29d5faa55c0dc8165c223d437f791d1ed865a3a6e2876ea489df334615ea5ab1fc268acceebc0c750c0433308b29fd408dc006b150074543bb626e6896adb10f88c3b4071023dd3fa9aee4ae75fafd755057901c94b47751167e07e33eddf4ec7202141bce1f6d5314a25576a79c66e51bc0f980a888d43aae7b6384797f7bb58d6941cc3d24f094f62666a7bbaabb39a133046b104fbe5814d83cdf6e674237358f4be1efec6c0f5dd3029685d9cf56c620d2a48986d0ce3703403e2d1665360efc06e6fdba3da0ec568a37f22b287f87e8d7b98b572605f7f6226fe3d7be5549ab78ba10683e07cc81ff139a8017b2a73c03c9af5f2fefffb0dc6713d3734980bff0e6de361a889b0dfad7b695a2fbfa1dfe38ac3c9c22494506bf4baaeebcd7daa93a24cc7f5831948abe85eb42be11127c5b1691935bde582f2addb7f8f072a987b725c148cdcf1ba530e0209b01da0d7e90d9e6520f6467f9da35cdabf9856d14640f74bc7054df16d001f36c9b81d839887588b54f62b68cf57f00d45b309090ab9b0baeba56c6774df840c72e54a2edae0ac5cc01d53fb8b289688a36c9ff53b4fdbfbcdbef5737d6f024f29152761c38906f417d520d4358719825da3b88c7c38140558c8572875b82a1763727b3317c390099cdbf42a13033bdede6d9ffb9f623d2088d617e8826a02b2e09ab867ce4e71486b4e0eefcad3c7f48a9be1b2fb3a285d16cbadb641816dfdce4cb089d67e564986665d65e926144899786948e6deff6f5361ecbc8962fc0f2d681898a2367da935e41139198127e949ef538fe3859a8e17123c296d7b9c3569b23b96cfe55cae9b2278926c5d990dcc4d7c4b2daae91fcbe31a1bb795352dc746f290406eb7e29365f88153cca5ca558b21c952844720db14395e7081f7c41522b4751e0a2d04f5a1cb53f0dfbb9505ff218a9fdc1e80575b0b9d"}, 0x1041) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000006c0)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") [ 237.483392] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 08:30:30 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0)={0x4}, 0x8, 0x0) splice(r1, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x10000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000002000058a06e89547262d27fe83beca2518c435372d887dcd611f8df073d2e9beb5e0cf8ada505e18ffd930ad0245bf41bd297f3b98310610f8e3580144a7cff1771bf026eea1678d6a7ca1eb34e55c357cef193ce9b01387c7cda4ada6dc298330d5df5b3b4f6d993eafed98c9f0c58e70590d91089d0e895a29e710486aa2505f13e1235cbf7f8592ebde455c3a2a6d25df8458bafca849d3eba8e95bf7f4a30b1502e64877e359a940a779dbe65efcd1b0077470d158c3fbf76dc0a45217e4e5b774b8101f3ba50ff886d6c4e2f25"], 0x28}}, 0x0) dup2(r2, r3) [ 237.788328] device nr0 entered promiscuous mode 08:30:30 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)="dd9fbd96cb38cc25ee8ba52eb36d88c86ab58aa835b46f", 0x17, 0xfffffffffffffffe) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() keyctl$chown(0x4, r0, r1, r2) accept$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x665, 0x8001, 0x0, 0xd, 0x2, 0x8, 0x200, 0xe8a, 0x9, 0x1, 0xffffffffffffaa16, 0x8, 0x0, 0x1, 0x8, 0x5], 0x1f000, 0x8400}) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x200000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e515320000000002008801262d0000000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0x0, 0x7fffffff}) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[]}}, 0xfffffffffffffffd) [ 238.250613] ldm_validate_privheads(): Disk read failed. [ 238.257923] loop3: p1 p2 p3 p4 [ 238.268084] loop3: partition table partially beyond EOD, truncated [ 238.298521] loop3: p1 size 100 extends beyond EOD, truncated [ 238.354500] loop3: p2 start 101 is beyond EOD, truncated [ 238.362586] loop3: p3 start 201 is beyond EOD, truncated [ 238.368691] loop3: p4 start 301 is beyond EOD, truncated [ 238.560928] ldm_validate_privheads(): Disk read failed. [ 238.566616] loop3: p1 p2 p3 p4 [ 238.579697] loop3: partition table partially beyond EOD, truncated [ 238.595041] loop3: p1 size 100 extends beyond EOD, truncated [ 238.603482] loop3: p2 start 101 is beyond EOD, truncated [ 238.609063] loop3: p3 start 201 is beyond EOD, truncated [ 238.616186] loop3: p4 start 301 is beyond EOD, truncated 08:30:31 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02f00000000000000000f438480df875e1df00d84a58c91fc610638939687988934c65cb6569e191bc195a2f9815e3003b03371eff03ae5eb71fb9dc857c0a6fe3e139b1f50f0ae0"], 0x10, 0x1) sendto$inet6(r0, &(0x7f0000000280), 0xb20d, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 08:30:31 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000b80)={@loopback}, &(0x7f0000000bc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={@local}, &(0x7f0000001600)=0xc) ioctl$void(r0, 0xc0045c79) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000017c0)=0x14, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000200)={'ip6tnl0\x00', @ifru_hwaddr=@remote}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fa11e59ba000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r2, r3) 08:30:31 executing program 1: socket$inet6(0xa, 0x80000100003, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x8000000000000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000004fc0)={0x0, 0x0, 0x2080}) timer_create(0x2, &(0x7f0000000480)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x7, &(0x7f0000000500)={0x0, 0x2b, 0x5}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000740)=0xfffffffffffffff9, 0x3) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000400)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0xfff}) mq_timedsend(r3, &(0x7f0000000540)="ced5edba2957e8878c334ae6399fb04a643954b2a5b2376417752b062ab052c05853c61dfc50575f42e5790f7860d1c42f0dc3e631fbb4f8531c34667712088f77212c71b1ab04a673270f2418cd", 0x4e, 0xfffffffffffffffc, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4b8a5391455d36cf) getcwd(&(0x7f0000000180)=""/118, 0xfffffffffffffcb6) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) 08:30:31 executing program 2: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x880, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", r0}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x8000, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = getuid() fstat(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r7, r8, 0x400) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000000000000000"]) recvmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) write$cgroup_type(r4, &(0x7f0000001900)="746888646164656400", 0x9) write$binfmt_script(r5, &(0x7f0000001a40)={'#! ', './file0', [{0x20, 'fscontext'}, {0x20, 'POLICY_CHECK'}, {0x20, 'ntfs\x00'}, {0x20, 'func'}, {0x20, 'user\x00'}, {}, {0x20, "d13ff3d776"}, {0x20, 'fsuuid'}], 0xa, "7faa7c5ee26880a7aafa44c9d53676493207610c7737c1ba5a857373f6c60e76bc7bbd01117b8af86e1a11a4489c59317d91ff0ea8ff719f2ee809bfca88c2f0af9338c363821094b8574195a8fe278b92c03117871633b61cab33e33f71a753aa4302341dcb1a02e774f290258ac68d331431fd1ef1b04e34a0e67765184a7e1f78c5c0051764ee4142ad2afc69bc140dabdbfc7dea4b832f5c81700629893bcc8ca506ab5b28dc321a6f84b58438642dfe0ca993ef1aaed147bf9836dab66aa5fcd0a571738a6a82ca778e474009ccc2fdfe9eb5c1948d8641c4157ccafcbfb82c55bd875c2f3ede38cf4f5e3f53eb473142c5351e5859560d3fd512a609e2507de5ba8014e875d2d71070aad7ee6c97b80f13b5389dd43ae3495308b16650a9f2480b329a4fc4b28805897dc647eca6e3fc7b1758899e00c130972caae2971ab4518b264c6f1fcea86122872f5e3f86eead50bf82e41fcb06013c708a57cc00fcd323603a3e2c347e4812c517b1a0ae907f34f6faa80df04327092c8fffd64f45d5e2ed4325634bc50284fefc83a082e22d3c607ff22ad1b13ed77c2dbdae7e302dd4c4a10b7548c6f68bce825641bdd721adcdeeaf5bd1cd69134a967cc77c1f71a2509abb14ea8812ff940aa27c817279c1f1023bfddec848df6d19085ed6d469b8b689686b46d97c6e69c3935de2318fc0d99d1ceab66aa12113a49e5e8fed26dccf33f0c719b8b23602b94edd93c7bac6edf5c75ac045a3524de1151344ed117ddede370e6045d0bb21257a288ae653b3333286e2ee06ea153fe3890d1f96ade7c84d024eaa4eeb08241d80186f031e24b1294f47068c83f0a0eb15deea024d8fb93f2a8f1a0fd0d772e7d489d461084b5a22f598b2a7f23ed9d38e6d1c6b9291b080f2172802e770a686c07c684e547de25fe2534b5585cc0cc1ed3233bba691be7113aa821246e7d5a3b84f6fb047b5ebf75728207ca935fc76d50085c00b3f79e7f197cfc35e8f9e1023afdcae1d909301e9efb4d1007717de89c2f446337ed955f17c3f8bf245482a2d1509b1d0e6a2020c97c7c74a8298f2fe60e987383a1b027a4f0525ee56a54c09cc5d9c97b9cce9e2c10fd851e910b823f3d9636d2b3a78604a2438d4ea9357add711438cc73f736bbe50255a4d851de43254e0a4da106270651abd56495492ced03e625ce30520a6585bea24fdaf2e00d19554be9f399a9e221e17fd2ec78f58ac96f91603c8561364736363d888d9387d7b1d6d3be5aae6a721b7316f0520c0345019e6a9e9391ff2d9599a131a881ddb31bada7ac9517eb1fcac770cfb6b007321e10c6513a390dfb1834eb7722c6fb84b42d3a8f02a248ba7698e6f4dad16839104f4013922f5e2daf6cd8a1f9de773f5b1900ad3b96435b5b755fe749a7e0ca5218394fdcb80c22e7e626e7205d8ac4636869487ad77555ebe531805ee34bb370b340529ca5d4b1c6f3939ec221385ebce3ee75487fecd4a21d7e5f4b334a56652245e2e75753e126d1741049bb583ac7afb4350a7dfb198cc94c411187ac664e3a07e782d4d27d0bbde69eef3f15dbe643e2b17f6e8bf110e2026b7fd0b9398501bab9501f45f67c1694b0fdca39d9aa777f4e1006574a9441f84fe0201c264cfd0a06e6c8cd4ae0bcd70538e2edfcbfe00aff6ec87ca41c461bf319ba08cde50de8ca31999853d7f9d18f81149eb766f71c6a53e33aaef815ac19e46b5431a548e2ecae5c3d6339aa86842dc1b32ef2395a4812c391ee5c2677311e01a4fc1492f726ab60daf8a3b8362c062ccb2c84bb34205117602d4756537112a55475c8eec728cdfd698d108f34f8fdaefb97b434aaeed1a612d0f7afed74a10d1f034095ed2e83e77b39e4a99eec47e7529eb99d1feb31ff2b5c905b25f6b31b1bf357c619d455c3fa779e24f2cb60f78644e9c1ebb80f27c524dbf1184b5f7c04efa551e0a14f9b8f79762f831dfdbf0e5f7057b5624f54b19973cacfda2bdb4b4e0276fb7684dbeb59a0492a4a2e33556a309a9e103dfd2a69204542203215f6c4127e206d09c45e3b466c210ed326c36e19df01727423bb79c3bae64a850bde0e48c72391cb9a2a70e525ae29bd6c43161878f73d8b18ce48d6409ad8902106c4cd6cc7fdea11f12777fd681fc2ebb4b099cc3f9c4e967095c01487ecec1d5ee93d4b1c7e696f02786232dd76481e3a08a3037dc9cb06a7d025f7741fda55e80be704484d0e3fd3b24dc051d743183c7a2c514328b4c732c6af3490d88438a1b4b6f2ecfca34e221332c73256544def8f6bb11e94bbdb19e65ccfb541aebcbb06f82a24886de3d99c186f8fda6c97dac1c383c739213c602186e47ece4148056381c63aacc99345e87ae7db0995840602edc6abf5e47fe56822ec8a3bd1da999394488220f5006a261706d4215f47f1dd08053f9fcb85b56f2d58c790df9c50486fd4885191ba1a3790686bd414bed58885c815439822d4ceb2dd759e59d9929003128fde064853af05ad45c3cb7e2dc6a4c85c26b666b60d7d93e071c9dbb9a9ce82967135d6ea589f919408f17ac4b5d049a56051a41dfa9e0e4cb1e1ac5fef4185f01c15f869d17aac7b91d19d84da35415c6b00901e2fe8b4f17fe8f814510d1377ee999fcfd68ed56096f55f55266feb134e04037b69699638550ba8b3a86e22d9dc8215682a6591c8a2f09a447f3ba319062e70b4c14c05e430d78b9b1b57b0a25b109c6644cb15c0b6a5a3e6cf0091a17cabe4efd633a0ee9e24b1775dd907ab01b9eee7739d15b7fb33681f736570009148ba2536172f5233ad6437972ef8b67f2b4aff2b8ea066c55fedebd0a02536c7b653539df2604287af6ffce7ff713e9a1f738c7517ed2793c1af33d32aa132bddb20a183f457dd77e9b2324044d53565eb1491fc699ea2c3989d39c378c0050a94e150be1375ec1914df791d8d03db70fa8c14f3204c380a2e24c2686838c37b34e431401215850bc2e8524246fd3f367cf1c7961d40c4b45b9db8be1d3cbfc6750a359ffb06c24ca4543892718c598cbd168bddac371c807335b166bbdbec94d329f58e21e9b19308d8a63b7383e017360232f291aded374913f5b76c9ad96722436305895bfe54ff57589db1fd9e44cace0812ad75f742dc0430d31ee79c56dcd3d54443426766a7ee7f17ad99f86e7522464da5a709becb78260b1af621d7ab9b7c86100d7eb80d55416d96ead1f06afc3bce75dd79d81bb562eaaeab67231a04ebaf61a218f96e5b42c82bbcd227ce3546c88ac8893ccfdb8f4a55746500eba073bf45313f825ff8e5a9a8011196c4bf28f1267f5a00d7fa67fed592577393df4ad7d095da81d3c0b4c58ae816c9c3989346fd67e94089f0af071aa323f59d230f352a0db29e9015477730b3bde5ad5f62c5219f1fc3b7690a18dc16ecbb20cb1129dbf8f8fe2cc324f2ecabf7f29d4d0b703aad8b83208db2db7ccfeef0a744221bb7931dc62f6d64f2dae47962f6f229e1eae9f2e3a4448dc888d53b9258363771b8d5daf2fb9fbcaef5f8c41e7c450e3ad60be55800fc5daacab69026ef39f3924389d7e14a66837dbbcd51326411d047abd0c4146be414420f38577de54ad27f7f647b9e8983134bf249ad2112018878c519ad4c618ddea8482c4e2ae1e37b6de7dd0c2690f772be330bf3905beacc026fbc068f604bc985deded8d7ea184d2b5169070960c4e25760142c76e7105462b4f8299c2107a3ef76cda5f1fa751c879ecaefc302bc40e3dc50091f0a2f2f78c3ccd15b2bc9d8c03735be52d6fe0d764b1db834933076971cb797e73735ce316603f32722ef3b8d3bb0272ce6de8d2d85cfb94e7b82dff9d8bbf66be26eda3f5c8c576963d81b823f8aaaee7d2c8214e8ad269737ecd6ff44e251e8b8d403d3b8c5664e38acf6688ad29da74871d3202497aeee20a727d13ebaddc639223c853020b120f5302df00895247385d71769939a35b37bc481d63f9d8d223bfd6d7ff566b74792ba6622238ea089f4e745cbcb2c70552ad0958c42409ac34d38312104e19bc79eb7028da464d3af2bc870dc0fde7403e4a1a95060a0df33c425e6c2f8cb3112ced3bf90f2d747467bd2cfb604cdf197f773dfcf9c48f56427313d975017f7afae820696584160f4bf8dee74aa034f2144017380c158dc7301ffef23f5a51e802efb3f5c29742b2bb6820daec74095c6f7e7b4b6655289eab57a157a857f10334f1a89faacfca1939ee1a3f44d1f1ae77eab4f5c35fd60484ddff1b3b40860ee0041f5b316319d82b3c9fdefccb1b393115dafe31472d52ae453e21dcda01acf7be37294912dab851a5b4de4184df6d08e6a32f8d481f82b65afb90243967dd9f7f99d1aab7b3fd558636f1655c059a2e75f695c2ae7ad2ccef3222bc7a0747141888b6042d27789fd40ca84aaecc2d63e2224be5af59747b10c001cbcc3f2dff808f3b898c81ec48ea69556276469baa5d21fa1da9ff85947f44b84dfb21a6315d61c27fbea73d757a2af15745c3e88a7113049925bd1bcef7b804e20a082af6d1d97425faa20c69b4f1b409cfcae8f551152af6055eb124c0ae4b2a6f0ecc6deabc73b841b44745fc1f1a445754212ef800e665aa60bbbc2be5a67c11e7a46a1576b7691f44037465b564cc16c3d042e86d9126aae18d4b8820b63f3bfd8e6824cdaeba33bafcbf9717177dd76fe86525bed4b4097898de3e49aaa607fb75ab8a9fc72738f607557f7c4a1af7a3db5c6dee8e20d0d63e8a95c3717ebbc0e925fddc7e43eb88ef5aea22346b3669ea5187959ba1b1098a0bc29d5faa55c0dc8165c223d437f791d1ed865a3a6e2876ea489df334615ea5ab1fc268acceebc0c750c0433308b29fd408dc006b150074543bb626e6896adb10f88c3b4071023dd3fa9aee4ae75fafd755057901c94b47751167e07e33eddf4ec7202141bce1f6d5314a25576a79c66e51bc0f980a888d43aae7b6384797f7bb58d6941cc3d24f094f62666a7bbaabb39a133046b104fbe5814d83cdf6e674237358f4be1efec6c0f5dd3029685d9cf56c620d2a48986d0ce3703403e2d1665360efc06e6fdba3da0ec568a37f22b287f87e8d7b98b572605f7f6226fe3d7be5549ab78ba10683e07cc81ff139a8017b2a73c03c9af5f2fefffb0dc6713d3734980bff0e6de361a889b0dfad7b695a2fbfa1dfe38ac3c9c22494506bf4baaeebcd7daa93a24cc7f5831948abe85eb42be11127c5b1691935bde582f2addb7f8f072a987b725c148cdcf1ba530e0209b01da0d7e90d9e6520f6467f9da35cdabf9856d14640f74bc7054df16d001f36c9b81d839887588b54f62b68cf57f00d45b309090ab9b0baeba56c6774df840c72e54a2edae0ac5cc01d53fb8b289688a36c9ff53b4fdbfbcdbef5737d6f024f29152761c38906f417d520d4358719825da3b88c7c38140558c8572875b82a1763727b3317c390099cdbf42a13033bdede6d9ffb9f623d2088d617e8826a02b2e09ab867ce4e71486b4e0eefcad3c7f48a9be1b2fb3a285d16cbadb641816dfdce4cb089d67e564986665d65e926144899786948e6deff6f5361ecbc8962fc0f2d681898a2367da935e41139198127e949ef538fe3859a8e17123c296d7b9c3569b23b96cfe55cae9b2278926c5d990dcc4d7c4b2daae91fcbe31a1bb795352dc746f290406eb7e29365f88153cca5ca558b21c952844720db14395e7081f7c41522b4751e0a2d04f5a1cb53f0dfbb9505ff218a9fdc1e80575b0b9d"}, 0x1041) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000006c0)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") 08:30:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x3, 0x7ffffffffffffffe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0xfffffd20) r2 = socket(0x1, 0x200000000000005, 0x8) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000003c0)=0x800080000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000004c0)=0x1, 0x0) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000480)="2173656c69f24d6e757873656c696e757800", 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x9, 0x5, 0x2, 0x40000000002, 0x80000001, 0x3, 0xfffffffffffffffc}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x4a) unshare(0x4010000) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 08:30:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x0, 0x0, 0x270}}], 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) fcntl$setlease(r0, 0x400, 0x1) 08:30:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000080)="4c87b10aadd1fb3618ccbe3d68af058529a49ffd537d4fbe") keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="187831cb05bff6ec02668dbf44fc000093d3c96f3854fc9f008a448dbff8132a0000f7ffffffffffffff00000000001a0000000000000000ac35901969e5361ed8908469de02327614373ac5abaac39308360ec8e85787dbf36c4a3433c38f0b2447877c065db2157392279e4d1149e14d20cdca172e7332"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 238.974495] audit: type=1400 audit(1540024231.755:40): avc: denied { create } for pid=7145 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 239.068237] audit: type=1400 audit(1540024231.795:41): avc: denied { write } for pid=7145 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 239.167317] audit: type=1400 audit(1540024231.795:42): avc: denied { read } for pid=7145 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:30:32 executing program 0: r0 = memfd_create(&(0x7f0000000440)='keyringmd5sum)\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setrlimit(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) write$tun(r1, &(0x7f0000000500)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xff2, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bfeb5f", 0x0, "fd8c1b"}, "4921bdcef9332fa2de8d5077fde483849be1b74f331d18020af1fa6b522252b8ab1cd428a4a7c9ff9a5a6aa389797812bff6794d5a1fb9c7eec2f396b6be65b41b790ab7b28c33c04c1fbef307472a7dbfda83338b09d6c1076cd44c7b208330a50fc5e00bfa399130db6fa1e3f8fb5d71be7cbfaa86dadd29fe26c405a5b49026e9d5dcd99f5e9f94e760ca8789d87e2d0a53f7bafefb1fd9977ce06f225b8e86a147faef7f5a80994ec8ef15cab4b66cf6bf1de1ba02c3581a989ce47b876207ddf66d16307b1d19f87cf552aec4f8150a047c3578121a1979cae5e6b0ea937f7bb7161387b3c9491ec1fa7e52fec51313369507d1d50bf17961d3f76c8258a0c7a07621c3ce10054e5e40c0a2ca44bea0f911c70c6558c3232d3045a8f3bffa5707ca3493f4f48ac2a4827bdba703b9feb8925db06b07c816b25f239f9a494d475c14a5c632b7b7937ebf17acc9893917dcc422caa0ea4a94ae46403ecc3f291dca9f8a02c73e5f0ab319759f0caf2b2defc2ee1f5595ae00bd668b97cd46766008f4d658254d67cc1fce962bb27837c4679b858cfeeef9e9b023082d29cf49b07f629dbb29f3fc5a5cc8ccca5b9979037d6112d2d3da537f2c36e87d4b0fede935c5521040fb29b773c6cacc23e040c5eb40bd070e6a759d971439040a0e4decfca16d454083b5b1cfa269b9aeb70459a1a8508911de42d0ff3495cd012c16c7b8598bd6fa1ef2854ac2fb310b37425e2e369dcc17d10f0b4156e87304edd04f02a284b91abaae25810683182be5e6bc971ccc4657d39d9633049731ad50a12463a5b1922411bca754b37c415f85a88e5d584a892f6fc7ce900bdaf3a813abf7e5d6f8526d7e779b0bac2bc3c26820e06cfdbda304d1305975053bc757b8ccff56946ab71fefef19a446e003aa8c3df0ad63148f1f14105a62d68cfbdfcef2417b1a27b84d4a0eb7ddb86a32abe9aacde30b6c737d3060d0a6d7e94ffa00a83ee4895c4c6404b5c221102ee4dbbcce6aa9df4c2cee69f94f7c786b7e5c49ca15a2c4e01ba6a351d6671e9d11833718a1e3b6a069641a1b32923ec5c54735594b549128aa09ab2c0ac015fe4a846d23d5e599148e9a52398a222f3d8394121539cc446619e931c98b009305ac6c1af7d4cb371b97d33334780b68b66dabaa609dd2aba37f0fa0f25f90b15696f7c064d7ba6a76869e168a1d7a4b1ffe99004d48057e1b189935be250e50ada53767b3a508ace35daa31a1a5cb50551e83bdbf27aba191b1978f94d5dcf1e0e3ca11b68591b345d6bfe805a278c7e67a4df7d4990453294746d7a78e1a7a82568519e5ce069ee5c7a298dfbcfe1df63772d406746d6e0d34b2dc3a13e91c77f5ff252e9801d2a9b1e112057229ada7fb2a511cd65f7f37717a5535191d13a31ef6930e31b12750de0a9f8c01f96f4cc7e1cde898048172c95d607577fb5e09205ec138d7ac6664fc845c2a5840a892495a7257589b37aa5489c30aad51ecfb6163d4d8007a894c75835fce60a03a980fbbba06f376397d5c1a89e4031b74216425af0402462234b55d5271f194267f57c20d881d31454170a5909cd5e0767d2a35dc5f7b7fa24a33e9a940ff7cf7c4b29308b6b5478d65fd18595723ab4e6980046a79574377e7e8853525c7da74228d346b351a2a43466ae77b8f5a55f4094600f58631f14fdc58b60da5379af56d2b693010cba5fef052461a33eb6829e1b99f92b573722b111206e336b01924e3ceadcc25842d6b89c8a1d12ca9b909b151886741ca3a730f57868ab098f0aa0e83ece9d5894cd8e09e29185769ba64a2f7b08b9acca370f5effabe311c4fe4ad032106001c6008b3c800391f4c696f8d6e0629dc0038e76398bd83128625bd6b57aa2dea7ac45aa4f218d435357f3e4b1c46d35beaaa16a2e27736bb7642e039699a7efb58946ecd3e608a5c3106927103c5e6e36db645d4dbc2df1bbe041ef9123d4a152bc0e5bb3464b335419381a431cc8add81ed622539304cd1628b61bc152b65074c02e7f7f7897795b679300a1a4e9843f085a0cae58171990aa675f3a2464d3e8baf0d67768d7433b488479ba5931dd51977885c9b83e7c0ff3cbe4864775eba601403dca9a19ab812a1fa08aee06451b738724148b0a773a471a084fe495c01461d63ba552e2d19ca137201949cd2b7dc2831a0833608d55586b09b14ccb6ff073ab0a4a7cc35d21a38c6daad294f9e01ee0aba94db05ac48f9106bb7bf22003c7f7059deeef39d3099c9db62ebb85f9ba21538ae92a5d62fa4cc062ce92f6b5f6c1ce00043ecadb7d44b01982bd356a7bff86a529b8be29dda99dbcc751c3f7ea4619a5e9fcd8c6cab007f5de6154b90b50c5b3f933214d67b2c915febd37e53bb6abf3fc31450edd7adc6e2c52f674e6f379c5449fa6929ddf988cd28d6b57536c61170751d467a80249f297fa6c9bd2df9405120cd74afab4df92eae49d21da6dd8574f4da0b6c4ea63e4ccef0b5fdd7fcec62dec6629287c4883c1a157e7bfb7edd29c44001c9997ae784f3cf8df295fabc7163d465b3c0809e6ac5ac9d5dda1983e69e69f43e7e676a3aa6812972324cc2ab8a02e5eb3f1c9588794fd3cc6d78d35c6507ae6652aa62f31f01ed3aaf8fc7df689e8c8ddba84dc74bc142ac7482b362c7e90e919346c3b6b784fb0ed0610bdabe7408fd9b824f229e2bf0b7b072c06b8cbad84c0d6707e1f5521d786608fa58e1b153b22916582a8bd19010ea5aff7313c9679415c648d73346be28695d4c36757f8b92cd11176161c087fbbd3d75fcdea62c6fbb4efc4eb30b446cbb0aa2d45091db4b987936dc7495d18aa3e92ea505550f07314f7ec6b98bcbc080cb17b6c0c63c97ce0bbc69b1d63db8e5cef375da737ddbc391ded7d45d06031cc6635e9a5d4aa73e8d1d2ed2325a3c00fd7049e59688eefb5b2631889ac515e637b407ce5e6830fcc7cce19960e13e750ff56345431587e647ca75ecca060b3eafc08403d9ac1f07d6a8ab4f20480b9d6ae4f60d82699f00dc3ce99a039d6bde1506ea6a9c3f95412e5b906db78c35bf7509d710908e41c4762f79713d2ddec16b079b703903d15c781ec704f58e9de8c0e6e84b7ee2ec7c057843e3eb6d322623089118eaf80c601bf332079fa62a44495e8f2323365fdecfa94234b76847f4288f1188c1430609971a726af38ae8cd556842a1dcfd864b18d61df2bf258797ff28c1d8192b8a34c2af699937de862a3f0bdacb10b3144495ed81991925adef81233c70439d5ad44b5e06ae8ad23cca2e36d97be1d7cacbdeb69cd49bf08836414f90175a46333bf58ad57b5ab86cf26caba8e1d9cbb6d63b139bd24e5eb93a6272d42aa7d59c4b6f83e48b6b46028a1bd885c404a2469aee5a9c7bdd13de0559db47ca723529209e4701963761778461fca4535fdbbefdac6801119729bf82812094daf67cce5d5afea9c844099a5795c76ca21ea0557cbf6b3ec8f12f3e2cb0a04e87d80cbd95c9ccc4042697e1b5d985d07b277b8b5323d1abb602ad768b50241d042c21d2e22df1476d246e19bab4931bcc600d506e10790fc5876bf1f0c8ad4af3f58f279da44261ee82cf10e196723c8a40ad40517c9ae2b0576048e47776815956a381255bf64f422015e2ea657e02e39cb359a9d1991112f2f68d466d02876a572d704401ba2a32a526947164e654e626627783b9bb4360461b383809226b6e1e7099c293a4c5720f0743882dd74c48a883992d2a465842916e63c8ee7a73e20face1d3b71c2ccfd61a13db76a3c1de5260318547cfcf9c5c4c47ae3868ca03bc8fd785ca8d0162f3d59fcf77e566d7ef7d631527cfeb74cf5048491819ca454e3ea72b256abb5e11fdcca810a6aed1f0780c9ad1b267c7a19175f7bbc4f06cbabdbdb9aeb43e6242376dec952835ad926de64811a662859a033084c1500354cf326ac98cd87d05542554b2d7b0f9c9d6e10b2d16e7264c5bb5f533ea288b26834c0d5b45aea1825682a591430799a58fb58150ce9e2a07ab68090a797606c426a3bcf0c34404059cdac4e3afafa36368de79891a1eadea582dbd939925be6d12b196393322557b3ecd467843e4ed7c2132b52eaf143dde97bdf6c5ac6a488fe50258e48b31f4e315cd3991ffc7f555bada77c08a54f0c8c05e50542b06ba1b24869c260f1c4a2a54c83fb35ae14aa4ce73661299656050c0ad0f01414b100dad8cc9d2990c5b56bad1da64229ddecee895d89686c2e69871ef022684587020061a98aae1d3499e281915d7f35f174f4878bb6922b0c5d58c02b9ee0c29022b2a61ca4046bb6fa78f355ac54c2df322f425ae2934cba16f34935104522537d2d59477d4fadaec4ce43d6bcfb8baa3b3a20ea0312df065a32fcd0ef6b6600bc5c76198af41160c4e76c422be9d954267d27711cd69d30a8c708ecb8c91faa398f2907b1dcc7b0d30b9680e5406d5b0fe1a520312d316d3addb86b2bdeec53d441fa3571124ff575ef479a75b43af4de4423eab297e9d43e6d9a314a69486324d832b1e797bb58696ef54d0b43b7fece17d9b0a55e1527d91458d0149d6c65068156735f9b75ed7705704363dd98d93b89146b9f318f24fedc51e9ac8de967fed7bca6890b3b391bcb285cb78c94537c381389fe07ab170a5ea70c84e40be62d4de1ffe85f72312b9ab2cd131d47201f2a88e77f210312f3ef7d77f72df167342619c50d494f029b26c003c62aa00f7284ae22e498761a28edd59342693a8275d715fc84ee56c53a8db9db9a31eeb0e9e32ada9a956a49ba651a649e30ea0ea12993d409ea5e7d85eb1c540a23d8ac47a7afebd9105f2c869e5af9bf87c92fc334b28ae48c17498292f8118f5c5876acdfaa1f325af4f0703c7fd8321d24a737487ff2e6f6e83a3e0c19e86c45638ea9b2bfcb43898289fdec3ace76adaf9edff9313d43e7837cebb5f8b05442dc442729acb96e50ef53d6e2d4ec9e2a8211d79bbe92b45250dd565bbfeb09990d4eb3ac7f38af3e4a47c511a03d9f67f84605b4a1d5eaefcc5dbc46e292322308a623147453297eb5774d366bb2d127de580ae7e716010ff6c88e910d13ba10fbee55cd73932d6967b889ba16f27c0ba1b21fe42e38c101cd1ffcba8f3312886abf76fd62cc9eafeaa42dfaa958cc6cd211638fffdedf065c54b2bdcab6c961101c3df374867756946560df103c993c8755d9a0ef2d2b76cf23eaca6517e54b21f459e42eb59dc382617c8f73d77cf55d14d312f9250353cbc9d7dc8e9bc21b714b246ec98cc98437810136e8d2b17bff9d1dc2ba61a80b4a6585946d200ee3f8bf808519626a8544be4aa421149f40a6b086215f2dcbbe4665431e8d5a90d91f6065fb76713a9e368f4af08cfa54420c3216e66e56c05a86a3a6ba6ebb814766c66def655734001795621526f72fae880f378997d3fe9f5c2c7ccd89cf9079f109d11f4386579034f594d08aa9a1a388fab602640c9e58a28373b206ce8f005f1dfa336e1c307c18c76ea3b704272e6e97fd68fd4b2c10e1164ed0b7bc66038ce14bfc777f0fe22940443025b1e4cad8444247b881cfc6593f8c30e2e657493bf9da77c3d3b5a180e801c06db7812fcda7db6fe0a393f488bcff365b0e196ba637080dfd93ca6d9d762ef2412cccac2a1274b832d36717f1cd7c1d8af3068a283734bdbe9381f737c0f"}}}, 0x1000) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x2f, @loopback, 0x4e23, 0x3, 'rr\x00', 0x8, 0x5e0, 0x50}, 0x2c) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000180)={0x3f, 0x1, 0x5, @random="c7237d7992ae", 'bpq0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)="6d656d6f72790100000016000000ea66571d6ef0133000", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x58}) mmap(&(0x7f0000663000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x11, r6, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20240, 0x0) [ 239.204673] audit: type=1400 audit(1540024231.875:43): avc: denied { map_create } for pid=7160 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 239.267586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.291237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:30:32 executing program 4: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3cd8dcc2461502438486402864b6c4f36682717743e81ac45216dd43241042f5"}}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 239.620016] device nr0 entered promiscuous mode 08:30:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000a24000/0x2000)=nil, 0x2000, 0x10200000008) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={"6e61749000", 0x19, 0x2, 0x340, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000a68], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_1\x00', 'vlan0\x00', 'veth1_to_team\x00', 'dummy0\x00', @local, [], @empty, [], 0x1d8, 0x1d8, 0x208, [@statistic={'statistic\x00', 0x18}, @comment={'comment\x00', 0x100}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev, 0xffffffffffffffff}}}}]}]}, 0x3b8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) [ 239.739171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:30:32 executing program 4: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8fbe, 0x200000) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000040)="a70739cfc61e966cc8e64d50aee073c2b431cecce9f0e15a621aae78687dedda74e6c33d99dce08d4013f7b06a42b563cf01acce49cc00e4e1e414fec4c27cbb5b4a77ac90a1871fbd1e209dfcb498ca1abe216229287a34a1d520166f90f9d3958b6fbf76a2c873f1d6eb464a3a4d23dae16ff98c492ba38892eed2c156bb1289bd97f1eda14346e4184f8696d4f8a5d6c843bd994814cfbe8dd875e3d3d8e45ed96d0168dd") add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz'}, 0x0, 0x0, r0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 08:30:32 executing program 1: socket$inet6(0xa, 0x80000100003, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x8000000000000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000004fc0)={0x0, 0x0, 0x2080}) timer_create(0x2, &(0x7f0000000480)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x7, &(0x7f0000000500)={0x0, 0x2b, 0x5}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000740)=0xfffffffffffffff9, 0x3) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000400)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0xfff}) mq_timedsend(r3, &(0x7f0000000540)="ced5edba2957e8878c334ae6399fb04a643954b2a5b2376417752b062ab052c05853c61dfc50575f42e5790f7860d1c42f0dc3e631fbb4f8531c34667712088f77212c71b1ab04a673270f2418cd", 0x4e, 0xfffffffffffffffc, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4b8a5391455d36cf) getcwd(&(0x7f0000000180)=""/118, 0xfffffffffffffcb6) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) [ 239.872801] x_tables: eb_tables: snat target: only valid in nat table, not nat 08:30:32 executing program 2: socket$inet6(0xa, 0x80000100003, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x8000000000000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000004fc0)={0x0, 0x0, 0x2080}) timer_create(0x2, &(0x7f0000000480)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x7, &(0x7f0000000500)={0x0, 0x2b, 0x5}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000740)=0xfffffffffffffff9, 0x3) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000400)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0xfff}) mq_timedsend(r3, &(0x7f0000000540)="ced5edba2957e8878c334ae6399fb04a643954b2a5b2376417752b062ab052c05853c61dfc50575f42e5790f7860d1c42f0dc3e631fbb4f8531c34667712088f77212c71b1ab04a673270f2418cd", 0x4e, 0xfffffffffffffffc, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4b8a5391455d36cf) getcwd(&(0x7f0000000180)=""/118, 0xfffffffffffffcb6) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) 08:30:32 executing program 5: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = accept4(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180)=0x9, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95)=0xfffffffffffffffc, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x10) close(r3) close(r1) 08:30:32 executing program 3: socket$inet6(0xa, 0x80000100003, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x8000000000000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000004fc0)={0x0, 0x0, 0x2080}) timer_create(0x2, &(0x7f0000000480)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x7, &(0x7f0000000500)={0x0, 0x2b, 0x5}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000740)=0xfffffffffffffff9, 0x3) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000400)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0xfff}) mq_timedsend(r3, &(0x7f0000000540)="ced5edba2957e8878c334ae6399fb04a643954b2a5b2376417752b062ab052c05853c61dfc50575f42e5790f7860d1c42f0dc3e631fbb4f8531c34667712088f77212c71b1ab04a673270f2418cd", 0x4e, 0xfffffffffffffffc, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4b8a5391455d36cf) getcwd(&(0x7f0000000180)=""/118, 0xfffffffffffffcb6) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) 08:30:32 executing program 4: socket$inet6(0xa, 0x80000100003, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x8000, 0x0) syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x8000000000000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000004fc0)={0x0, 0x0, 0x2080}) timer_create(0x2, &(0x7f0000000480)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000004c0)) timer_create(0x7, &(0x7f0000000500)={0x0, 0x2b, 0x5}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000740)=0xfffffffffffffff9, 0x3) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000a00)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000400)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0xfff}) mq_timedsend(r3, &(0x7f0000000540)="ced5edba2957e8878c334ae6399fb04a643954b2a5b2376417752b062ab052c05853c61dfc50575f42e5790f7860d1c42f0dc3e631fbb4f8531c34667712088f77212c71b1ab04a673270f2418cd", 0x4e, 0xfffffffffffffffc, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4b8a5391455d36cf) getcwd(&(0x7f0000000180)=""/118, 0xfffffffffffffcb6) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) 08:30:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) io_setup(0x7, &(0x7f0000000040)=0x0) io_getevents(r1, 0x6, 0xa, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={0x77359400}) r2 = getpid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sched_setscheduler(r2, 0x5, &(0x7f0000000140)=0x76e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x3, &(0x7f0000000000), 0x1) 08:30:32 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x11, r1) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x8, 0x5, 0x1, 0x7, 0x0, 0x768, 0x22008, 0x1, 0x1, 0x20, 0xec, 0x1, 0x6, 0x7ff, 0xf4, 0x7, 0x0, 0x1, 0x9, 0x6, 0xfffffffffffffffd, 0xf49, 0x400, 0x401, 0xaa69, 0x9, 0x4, 0x2, 0x1, 0xf0, 0x0, 0x1111, 0x2, 0xffffffffffff4af6, 0x2, 0x100, 0x0, 0x3, 0xb87cdbb3c41587a7, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0x200000, 0x0, 0x3, 0x10000, 0x9, 0x3}, r1, 0x4, r2, 0x1) 08:30:32 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x4, {0x2, 0x4e22}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @loopback}, 0x8, 0x40, 0x5, 0x4, 0x1, 0x0, 0x7, 0x4, 0x5}) r1 = socket(0x20000000000000a, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x8}, 0x1c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x3f, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e20, @loopback}, 0x80, 0x6, 0x8, 0x7, 0x101, &(0x7f0000000140)='eql\x00', 0x80000000, 0x2, 0xb7}) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000002c0)) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000180)=""/16, &(0x7f0000000040)=0x10) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000240)) 08:30:33 executing program 0: msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x0, 0xa4a3ad41a879dde0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'cpuset%eth1'}) 08:30:33 executing program 5: openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0xfffffffffffffffb, 0x1ff, 0x2, 0x1]}) 08:30:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x4042, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000004c0)=""/175) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000300)=0xfffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000000780)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0x0, [], 0x0, 0xf}, 0x48) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@generic={0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x2, 0x8}) setrlimit(0x2, &(0x7f0000e63ff0)={0x0, 0x20080000000}) prctl$setmm(0x23, 0x0, &(0x7f0000ff8000/0x2000)=nil) 08:30:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) sendto$packet(r1, &(0x7f0000000080)="dd23bd0a47bfb1fc1da6f46ff41921cbba68e277a346d3b7acfacc873c56525b19e6d93687a02ce0974ad854e1b9083a4d9a53008cc12c085e1db3", 0x3b, 0x810, 0x0, 0x0) 08:30:33 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e722", 0x11, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xfffffffffffffffb) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000000100)="44ae0f11d1d826f5c64c208b8472"}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200000, 0x0) keyctl$update(0x2, r0, &(0x7f0000000440)="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", 0xfa) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x202000, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d0410a9da0404ed", 0x7f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 08:30:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) 08:30:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x20a, &(0x7f0000000040)=0x3f8, 0xfe7d) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x0, 0x1802000000000000]}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'nr0\x00'}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1400, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0), 0x4) mlockall(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x6, @local}, 0x10) shutdown(r2, 0x1) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000580)=""/160) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/40) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 08:30:33 executing program 5: r0 = semget$private(0x0, 0xa, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x4}], 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000180)={0x6, 0x101}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) semop(r0, &(0x7f000001a000)=[{}, {0xfffffffffffffffc}], 0x2) setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000100)=0x1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x301000, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000040)=""/51) r3 = mq_open(&(0x7f00000001c0)='ppp1\'bdev\x00', 0xc0, 0x100, &(0x7f0000000200)={0x7fffffff, 0x5, 0x9, 0x80000000, 0xba, 0x5, 0x7, 0x3}) fsetxattr(r3, &(0x7f0000000240)=@known='system.advise\x00', &(0x7f0000000280)='-(security{*\x00', 0xd, 0x2) 08:30:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010000000000000008000200000000000000000000000400000008000b0000000000"], 0x28}}, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x6, 0x2, 'client1\x00', 0xffffffff80000001, "9139ffe63f74c4bf", "63e7bf2cd14ac62409bbee76dccd2fa8608aae953ab9f4931f005a83532192ad", 0x5, 0x2}) write$P9_RWSTAT(r1, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x47, 0x3, 0x1, &(0x7f0000ffb000/0x3000)=nil, 0x1}) 08:30:33 executing program 2: socket$inet6(0xa, 0x80003, 0x10001) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x5034c1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600004}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fcff25bd7000fc08000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_bt(r0, 0x541b, &(0x7f0000000200)="ba9a999965c34fdc79d81a91f8a42bfd205439970be80baf3b4bc7f5d2b6ef5242c8384bb453c77196d32a891e20ec4407be95239e2ec34addb75faa35fb41baa660cdd9ad627f0cf043a233d05371b6b8f88068e68e03d65d620dfa7ce7136a0f2a0b664a3f7d281f8219a89a843b70e80ef42315bc4dab1bafb40f64a7a8c7bf4aa7405db090cb9aaf5de29ff60b94b6ba06dd2f6f2a6c45f646f717f9e7016b3f7387771565ed61746bc9053e299df73aea8a53183a9797f824be606a481c96ae8f342e") r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r2, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8}]}, 0x30}}, 0x0) 08:30:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x3}) read(r0, &(0x7f00000002c0)=""/109, 0x6d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xfffffffffffffc80) prctl$getname(0x10, &(0x7f00000004c0)=""/218) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f00000000c0)={0x5f6a459b, 0x4, 0x4, 0x8, 0xffffffffffffff01, 0xffffffff}) 08:30:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f0000000140), 0x100000b9, 0x400000000000) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 08:30:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x20a, &(0x7f0000000040)=0x3f8, 0xfe7d) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x0, 0x1802000000000000]}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'nr0\x00'}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1400, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0), 0x4) mlockall(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x6, @local}, 0x10) shutdown(r2, 0x1) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000580)=""/160) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/40) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 08:30:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5b86967b5b88a933b3bf"]) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) read$FUSE(r0, &(0x7f0000002000), 0x10165) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) r2 = dup(r1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000800)) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50) 08:30:33 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f00000000c0)="220000005e000721004f10f7d4d4185400000000003c02f7399a115ffe4712045b0d", 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) r2 = getpgid(0xffffffffffffffff) sched_getattr(r2, &(0x7f0000000000), 0x30, 0x0) 08:30:33 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x347f6850286a98d9, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/17) prctl$intptr(0x200000002f, 0x2) [ 241.170014] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 08:30:34 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e722", 0x11, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xfffffffffffffffb) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000000100)="44ae0f11d1d826f5c64c208b8472"}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200000, 0x0) keyctl$update(0x2, r0, &(0x7f0000000440)="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", 0xfa) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x202000, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d0410a9da0404ed", 0x7f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 08:30:34 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="009f34c4cc23e68ec7f4282ca16d5516c904839768d1cf7ff846d047ff11"], 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) msgrcv(r0, &(0x7f0000000040)={0x0, ""/79}, 0x57, 0x8000000000000000, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x400) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000100)) 08:30:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100}]}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 08:30:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x32d, 0x20040001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") splice(r1, 0x0, r0, 0x0, 0x40000ab11, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') 08:30:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x20a, &(0x7f0000000040)=0x3f8, 0xfe7d) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x0, 0x1802000000000000]}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'nr0\x00'}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1400, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0), 0x4) mlockall(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x6, @local}, 0x10) shutdown(r2, 0x1) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000580)=""/160) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/40) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 08:30:34 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e722", 0x11, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xfffffffffffffffb) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x15, 0xe, &(0x7f0000000100)="44ae0f11d1d826f5c64c208b8472"}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200000, 0x0) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c21782d4501b9dfbf48a9f3ea14cb792a7876f17297a8c870d7a2d46a36a2cd3e33e21894d91caa64b131dbf5c53066c1ac83ceba29ceab25127e8a4", 0xfa) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x202000, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d0410a9da0404ed", 0x7f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 08:30:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x4000000000000002, 0x300) close(r1) accept(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80) 08:30:34 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) fsetxattr(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='%%$^\x00', 0x5, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) mmap(&(0x7f00003d9000/0x2000)=nil, 0x2000, 0xa, 0x1e, r0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 08:30:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x20a, &(0x7f0000000040)=0x3f8, 0xfe7d) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x0, 0x1802000000000000]}, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000240)={'nr0\x00'}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1400, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0), 0x4) mlockall(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x1, 0x6, @local}, 0x10) shutdown(r2, 0x1) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000580)=""/160) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/40) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 08:30:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = memfd_create(&(0x7f00000000c0)='proc+mime_type^#\x00', 0x5) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x102800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f74050000000000000030303030303030303030303030303134303030302c757b65725f69643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0xfffffffffffeffff,max_read=0x000000000000025a,allow_other,fowner=', @ANYRESDEC=r5, @ANYBLOB=',fowner=', @ANYRESDEC=r7, @ANYBLOB=',fsname=@%,smackfsdef=vmnet1cgroup+,dont_hash,obj_user=vcan0\x00,context=system_u,\x00']) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', r6}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r8}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f0000000200)={0x1d, 0x0, 0x200000000000000}, 0x10, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) 08:30:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x1, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x4000, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mq_unlink(&(0x7f0000000440)='wfdno') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000007002e2f66696c6530000000000000"], 0x2a) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) mount$9p_virtio(&(0x7f00000005c0)='trans=fd,', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='9p\x00', 0x0, &(0x7f0000000880)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@version_9p2000='version=9p2000'}, {@cache_mmap='cache=mmap'}, {@version_9p2000='version=9p2000'}], [{@euid_lt={'euid<', r3}}, {@subj_role={'subj_role', 0x3d, '#ppp1)'}}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}]}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000002901000000000075ecdfe043100b693756f200000000ff030000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000600)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x1, 0x1}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000380)=@sha1={0x1, "c4e80234420720580f125db7af9edb253d606c0b"}, 0x15, 0x2) 08:30:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000002c0)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000ff0f00000000000000000022c6b2a2000000000000000000ddd3d8574d057eb631921647937186da"]) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3ff, 0x440000) r2 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7ff) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x0) fallocate(r1, 0x10, 0x0, 0x400) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000000000000000, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x80000001, 0x1, 0x4, 0xfffffffffffffffb, 0x7, 0x3f, 0x3}, 0x1c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000380)=0xf000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000280)) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/133, 0x85, 0x0) [ 242.290398] 9pnet_virtio: no channels available for device trans=fd, [ 242.524309] WARNING: CPU: 1 PID: 7340 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 [ 242.532473] Kernel panic - not syncing: panic_on_warn set ... [ 242.532473] [ 242.539875] CPU: 1 PID: 7340 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #71 [ 242.547067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.556429] Call Trace: [ 242.559041] dump_stack+0x1c4/0x2b4 [ 242.562701] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.567912] panic+0x238/0x4e7 [ 242.571119] ? add_taint.cold.5+0x16/0x16 [ 242.575281] ? __warn.cold.8+0x148/0x1ba [ 242.579359] ? kmalloc_slab+0x56/0x70 [ 242.583173] __warn.cold.8+0x163/0x1ba [ 242.587076] ? rcu_bh_qs+0xc0/0xc0 [ 242.590627] ? kmalloc_slab+0x56/0x70 [ 242.594444] report_bug+0x254/0x2d0 [ 242.598094] do_error_trap+0x1fc/0x4d0 [ 242.602003] ? math_error+0x3f0/0x3f0 [ 242.605815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.610684] ? trace_hardirqs_on_caller+0x310/0x310 [ 242.615717] ? p9_fid_destroy+0x9f/0xd0 [ 242.619722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.624586] do_invalid_op+0x1b/0x20 [ 242.628311] invalid_op+0x14/0x20 [ 242.631779] RIP: 0010:kmalloc_slab+0x56/0x70 [ 242.636193] Code: c5 60 ab 00 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 80 aa 00 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 a0 aa 00 89 5d c3 66 90 66 2e 0f 1f 84 00 [ 242.655124] RSP: 0018:ffff8801838bf980 EFLAGS: 00010246 [ 242.656294] kobject: 'loop5' (0000000025a3f188): kobject_uevent_env [ 242.660516] RAX: 0000000000000000 RBX: 0000010000000100 RCX: ffffc90009f40000 [ 242.660536] RDX: 000000000001b958 RSI: 0000000000000000 RDI: 0000010000000100 [ 242.660545] RBP: ffff8801838bf980 R08: ffff8801b3d8e440 R09: 0000000000000006 [ 242.660554] R10: 0000000000000000 R11: ffff8801b3d8e440 R12: fffffffffffffff4 [ 242.660563] R13: ffff8801c20a5c00 R14: ffff8801c20a5c00 R15: 0000000000608040 [ 242.660616] __kmalloc+0x25/0x760 [ 242.660641] ? __v9fs_get_acl+0x99/0x170 [ 242.677529] kobject: 'loop5' (0000000025a3f188): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 242.681710] ? __v9fs_get_acl+0xc5/0x170 [ 242.681732] __v9fs_get_acl+0xc5/0x170 [ 242.681749] v9fs_get_acl+0xf7/0x2a0 [ 242.681768] v9fs_mount+0x636/0x8f0 [ 242.681791] mount_fs+0xae/0x31d [ 242.681821] vfs_kern_mount.part.35+0xdc/0x4f0 [ 242.743796] ? may_umount+0xb0/0xb0 [ 242.747443] do_mount+0x581/0x31f0 [ 242.750997] ? trace_hardirqs_off+0x310/0x310 [ 242.755518] ? trace_hardirqs_on+0x310/0x310 [ 242.759954] ? copy_mount_string+0x40/0x40 [ 242.764223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 242.769013] ? retint_kernel+0x2d/0x2d [ 242.772943] ? copy_mount_options+0x1a1/0x380 [ 242.777464] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 242.779897] kobject: 'loop0' (0000000079e4a56b): kobject_uevent_env [ 242.782338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.788775] kobject: 'loop0' (0000000079e4a56b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 242.794278] ? copy_mount_options+0x288/0x380 [ 242.794296] ksys_mount+0x12d/0x140 [ 242.794313] __x64_sys_mount+0xbe/0x150 [ 242.794335] do_syscall_64+0x1b9/0x820 [ 242.794353] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 242.794372] ? syscall_return_slowpath+0x5e0/0x5e0 [ 242.830065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.834974] ? trace_hardirqs_on_caller+0x310/0x310 [ 242.840027] ? prepare_exit_to_usermode+0x291/0x3b0 [ 242.845069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.849939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.855135] RIP: 0033:0x457569 [ 242.858333] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.877765] RSP: 002b:00007fd7c0b9cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.885504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 242.892788] RDX: 00000000200003c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 242.900074] RBP: 000000000072bf00 R08: 00000000200004c0 R09: 0000000000000000 [ 242.907370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7c0b9d6d4 [ 242.914659] R13: 00000000004c28a1 R14: 00000000004d3c90 R15: 00000000ffffffff [ 242.923230] Kernel Offset: disabled [ 242.926941] Rebooting in 86400 seconds..