Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. 2019/08/12 17:15:40 fuzzer started syzkaller login: [ 54.718284] kauditd_printk_skb: 5 callbacks suppressed [ 54.718300] audit: type=1400 audit(1565630140.312:36): avc: denied { map } for pid=7847 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/12 17:15:42 dialing manager at 10.128.0.105:37883 2019/08/12 17:15:42 syscalls: 2482 2019/08/12 17:15:42 code coverage: enabled 2019/08/12 17:15:42 comparison tracing: enabled 2019/08/12 17:15:42 extra coverage: extra coverage is not supported by the kernel 2019/08/12 17:15:42 setuid sandbox: enabled 2019/08/12 17:15:42 namespace sandbox: enabled 2019/08/12 17:15:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/12 17:15:42 fault injection: enabled 2019/08/12 17:15:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/12 17:15:42 net packet injection: enabled 2019/08/12 17:15:42 net device setup: enabled [ 135.666352] audit: type=1400 audit(1565630221.262:37): avc: denied { map } for pid=7865 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 17:17:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x100000000050000}]}) mount$9p_xen(&(0x7f0000000080)='-\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000340)={'trans=xen,'}) [ 178.920398] audit: type=1400 audit(1565630264.512:38): avc: denied { map } for pid=7867 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=559 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 179.086649] IPVS: ftp: loaded support on port[0] = 21 17:17:44 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fstatfs(r0, 0x0) [ 179.213319] chnl_net:caif_netlink_parms(): no params data found [ 179.330394] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.337142] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.346169] device bridge_slave_0 entered promiscuous mode [ 179.361104] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.364124] IPVS: ftp: loaded support on port[0] = 21 [ 179.374426] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.386822] device bridge_slave_1 entered promiscuous mode [ 179.434630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.447234] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:17:45 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f00000014c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) [ 179.485627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.493801] team0: Port device team_slave_0 added [ 179.499691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.507920] team0: Port device team_slave_1 added [ 179.513929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.526205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.653854] device hsr_slave_0 entered promiscuous mode [ 179.690732] device hsr_slave_1 entered promiscuous mode 17:17:45 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x8000000000000006, 0x0, 0x0, 0x50000}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_getscheduler(r0) [ 179.757237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 179.767822] IPVS: ftp: loaded support on port[0] = 21 [ 179.773749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 179.793847] chnl_net:caif_netlink_parms(): no params data found [ 179.838105] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.844687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.851747] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.858142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.003731] IPVS: ftp: loaded support on port[0] = 21 17:17:45 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fchmod(r0, 0x0) [ 180.032963] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.044641] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.052654] device bridge_slave_0 entered promiscuous mode [ 180.068519] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 180.078147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.104176] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.113885] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.122582] device bridge_slave_1 entered promiscuous mode [ 180.176459] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.246962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.260801] chnl_net:caif_netlink_parms(): no params data found [ 180.277554] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.296416] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.304599] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 180.328713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.338859] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.362398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.369982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.381744] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.384782] IPVS: ftp: loaded support on port[0] = 21 [ 180.387862] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.436117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.446873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.455341] team0: Port device team_slave_0 added [ 180.474582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 17:17:46 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) [ 180.483262] team0: Port device team_slave_1 added [ 180.491653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.499849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.511069] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.517489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.547990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.565595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.574568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.585372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.594438] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.600908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.614808] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.622596] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.630197] device bridge_slave_0 entered promiscuous mode [ 180.638743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.663356] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.669796] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.678652] device bridge_slave_1 entered promiscuous mode [ 180.696058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.740654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.758615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.822539] device hsr_slave_0 entered promiscuous mode [ 180.861129] device hsr_slave_1 entered promiscuous mode [ 180.922010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.954562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.972943] IPVS: ftp: loaded support on port[0] = 21 [ 180.980006] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.992515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.001939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.028653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.036743] team0: Port device team_slave_0 added [ 181.045006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.053861] team0: Port device team_slave_1 added [ 181.059329] chnl_net:caif_netlink_parms(): no params data found [ 181.089129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.104481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.125249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.134042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.141996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.158384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.167941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.195845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.206344] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.215294] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.222934] device bridge_slave_0 entered promiscuous mode [ 181.231061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.239446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.250588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.310926] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.317346] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.325497] device bridge_slave_1 entered promiscuous mode [ 181.346042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.353713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.413936] device hsr_slave_0 entered promiscuous mode [ 181.470973] device hsr_slave_1 entered promiscuous mode [ 181.511978] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 181.522798] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 181.535415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.544287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.558027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.576644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.584538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.599404] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.605640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.626235] chnl_net:caif_netlink_parms(): no params data found [ 181.647653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.655395] team0: Port device team_slave_0 added [ 181.661475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.671659] team0: Port device team_slave_1 added [ 181.689340] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.707622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.719063] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.764148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.775918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.795811] audit: type=1400 audit(1565630267.392:39): avc: denied { associate } for pid=7868 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 181.796148] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.826153] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.834538] device bridge_slave_0 entered promiscuous mode [ 181.842991] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.849400] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.859273] device bridge_slave_1 entered promiscuous mode [ 181.905162] device hsr_slave_0 entered promiscuous mode [ 181.960703] device hsr_slave_1 entered promiscuous mode [ 182.112996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 182.139090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.171883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.178639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 182.188381] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:17:47 executing program 0: [ 182.248636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.264099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.270894] chnl_net:caif_netlink_parms(): no params data found [ 182.288174] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.298239] team0: Port device team_slave_0 added [ 182.319105] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.354405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 17:17:47 executing program 0: 17:17:48 executing program 0: [ 182.367136] team0: Port device team_slave_1 added [ 182.376201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.388781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 17:17:48 executing program 0: [ 182.427410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.436975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.453782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.463391] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 182.469484] 8021q: adding VLAN 0 to HW filter on device team0 17:17:48 executing program 0: [ 182.478821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 17:17:48 executing program 0: [ 182.544753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.564968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.573955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:17:48 executing program 0: [ 182.595686] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.602155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.674646] device hsr_slave_0 entered promiscuous mode [ 182.711217] device hsr_slave_1 entered promiscuous mode [ 182.752698] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.759323] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 182.778826] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.786040] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.793679] device bridge_slave_0 entered promiscuous mode [ 182.801359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.808797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.816576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.824434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 182.838068] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.844931] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.854796] device bridge_slave_1 entered promiscuous mode [ 182.876762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.888251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.903664] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 182.909793] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.918121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.928345] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.937508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.945846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.954181] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.968004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.975633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.993814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.006205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.034139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.042439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.050480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.058095] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.064657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.072028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.082476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.090029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.098673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.107528] team0: Port device team_slave_0 added [ 183.114424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.125584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.135527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.153234] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.161743] team0: Port device team_slave_1 added [ 183.167451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.177982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.188753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.202818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.212234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.221824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.229920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.237806] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.244204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.252674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.262495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.269765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.278161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.295114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.306172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.321162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.331183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.337497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.346587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.354879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.362941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.369893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.377436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.395901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 183.413713] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 183.419825] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.456515] device hsr_slave_0 entered promiscuous mode [ 183.500840] device hsr_slave_1 entered promiscuous mode [ 183.560754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.568613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.579098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 183.589577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.598231] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.605884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.613527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.622018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.629692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.638291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.653814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 183.667166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.674935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.691548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.698665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.706652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.715320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.723392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.731758] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.738127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.747530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.759972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 183.779347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.793177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.802323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.810162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.818038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.826124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.834207] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.840680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.850135] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.857522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.866633] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.876321] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.892935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.903358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.916208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.932855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.946185] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.954740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.968675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.977731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.984995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.998087] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.007500] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.022021] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.029815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.048637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.099209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.111524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.119550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.141436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:17:49 executing program 1: [ 184.153184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.169896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.180841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.188302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.207190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.217205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.226678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.235287] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.241775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.260043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 184.272048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.282190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.289916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.298738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.309500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.317731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.326833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.334672] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.341138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.362516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.378892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.386286] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 184.393518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.404376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.434181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.454710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.466465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.482040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.493848] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.505321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.515681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.545376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.557323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.584091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.641620] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.648138] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.689804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.716322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.741859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.755163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.768750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.783417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 17:17:50 executing program 2: [ 184.813369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.841971] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.848690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.876101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.898179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 184.911034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.918382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.932346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.947575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.964033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.976045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.984102] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.990626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.001555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 185.009959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.022844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.039560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.062521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.074578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 17:17:50 executing program 3: [ 185.092546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.104164] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.110231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.123620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.156994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.167954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.181982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.201927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.209458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.222599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.234218] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 185.246323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 185.262203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.283827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.291942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.300188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.309786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.317968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.343133] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.349242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.367648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 185.389614] 8021q: adding VLAN 0 to HW filter on device batadv0 17:17:51 executing program 4: 17:17:51 executing program 5: 17:17:51 executing program 0: 17:17:51 executing program 1: 17:17:51 executing program 2: 17:17:51 executing program 3: 17:17:51 executing program 4: 17:17:51 executing program 1: 17:17:51 executing program 4: 17:17:51 executing program 2: 17:17:51 executing program 3: 17:17:51 executing program 0: 17:17:51 executing program 5: 17:17:51 executing program 2: 17:17:51 executing program 1: 17:17:51 executing program 0: 17:17:51 executing program 5: 17:17:51 executing program 4: 17:17:51 executing program 3: 17:17:51 executing program 2: 17:17:51 executing program 1: 17:17:51 executing program 4: 17:17:51 executing program 0: 17:17:51 executing program 1: 17:17:51 executing program 3: 17:17:51 executing program 2: 17:17:51 executing program 5: 17:17:51 executing program 0: 17:17:51 executing program 4: 17:17:51 executing program 1: 17:17:51 executing program 3: 17:17:52 executing program 5: 17:17:52 executing program 2: 17:17:52 executing program 0: 17:17:52 executing program 4: 17:17:52 executing program 3: 17:17:52 executing program 5: 17:17:52 executing program 4: 17:17:52 executing program 2: 17:17:52 executing program 1: 17:17:52 executing program 0: 17:17:52 executing program 3: 17:17:52 executing program 2: 17:17:52 executing program 5: 17:17:52 executing program 1: 17:17:52 executing program 4: 17:17:52 executing program 3: 17:17:52 executing program 0: 17:17:52 executing program 1: 17:17:52 executing program 5: 17:17:52 executing program 2: 17:17:52 executing program 3: 17:17:52 executing program 4: 17:17:52 executing program 1: 17:17:52 executing program 0: 17:17:52 executing program 5: 17:17:52 executing program 2: 17:17:52 executing program 3: 17:17:52 executing program 0: 17:17:52 executing program 1: 17:17:52 executing program 4: 17:17:52 executing program 5: 17:17:52 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x2881, 0x0) sendto$netrom(r0, &(0x7f0000000200)="42ee234dc320ba203b3a6350f2e0877ffa3f6251f454d84ca8cb173ed0256ffea16d7134902c511c7f7775c7c714a14f8d215666059ec9eded029816877cb17ba84fa2dc5f3563d80a013e6a7fb01ea3fda795c590ace04501b9a9eefb6171fda39410f13014eadc016026383baea45dd690ae73d47c3dca8f37c581080ef7efe588573c5446e2c520a2b133899ccb2ff39c951037f2e6b0c003a84265408829ac72fd3883b3aa28b9f1b45fa935f39cb973f7ca90d14437a06c4afd94cb5e40f35877361e86e93c565edf508c", 0xcd, 0x0, &(0x7f0000000040)={{0x3, @default, 0x1}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='/dev/dlm-monitor\x00', r0}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="910000008a88a6d4fb232735cb8d7d806c13dd7a783647fcd732ba89db5dd0a2556882418b8c14676212e5df6987da44ecbf057a6d8506d876daba183706b10f0a69fe39ad187a34cd46a252f71ee701000100d3db6f87f7153625a48ebcebe89d06e02613edd27039ed02a85f76afebdeb173f23ccac4a18be2fd9f88c35d710bccf36f7e81d5d58c742a90ad1696e94983c2031a0dc524a51bbc47825c754dd6d7ed0c16b63c164638585688364a5291132a7e6dac0387c0cde9c3db8609e64b4d3b9d416fb59342364027d1653e558767dd8d5a6fda1d1bf30c123ec17c4cee82cd70a6fbbc0e0c0481948521639d8a098120d43d7600800100149231c93f54cfeba221dae5edbc489bbe215e433b8a813592ec8115996827bfaaafd356d08660becced81294193cfd32cd556af46c0354c6bde62c20ac3143b29fede4a25b0398d48c2984c69bfdaab36b7bfac1bec47a17960f8bca988b0f3f83f22365e"], &(0x7f0000000400)=0x99) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r3, 0x0, 0x9, &(0x7f0000000000)='\x10,em0&--\x00'}, 0x30) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000540)=r5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={r4, 0x6, 0x30, 0x6, 0x1000}, &(0x7f0000000480)=0x18) 17:17:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x430, 0x118, 0x0, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x8, 0x1}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480) 17:17:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb9) 17:17:53 executing program 3: mknod$loop(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x4bb, 0x7, 0x100000001, 0x1ff}, {0x2, 0x1f8c, 0x2, 0x2}, {0x1c00000000, 0x1, 0xfffffffffffffff8, 0xffffffffffffff80}, {0x1, 0x10000, 0x6, 0x4f}, {0x80000001, 0xfffffffffffffffc, 0x80, 0x1}]}) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10801, 0x0) pipe2(&(0x7f0000000240), 0x84800) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000080)='\x00', r0) 17:17:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='N', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x1, 0x0, 0x5017, 0x4, 0x6, 0x4, 0x6, 0x1}) 17:17:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) bind$can_raw(r0, &(0x7f0000000000), 0x10) [ 187.572318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.593427] hrtimer: interrupt took 31217 ns 17:17:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x82, 0x10, 0x8, 0x9}, &(0x7f0000000080)=0x18) sysfs$3(0x3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x2, 0x30}, &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000240)='/dev/dri/card#\x00'}, 0x30) r5 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r7 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) sendmsg$unix(r2, &(0x7f0000000200)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}], 0x74da1eaa03ede41d, 0x80}, 0x10) 17:17:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 17:17:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x8636, 0x4) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5937aa000000000000000000000000224d688f5deb9611dc1aff2480a86f3082dbd8eeb7cc6c80a0a057fd69dd29b2932d15bd34536564fa06c9f088fa35270766ec3fd70729fc50ef5a40e2194eff010311910aaae6863de4bfb39070f5a394008b916198480591894f0d42a34253124d68b1dca817feb34a7726e2e07877962b9764039eb6cad3080c033c9c69b06a0a876994451ab07d15dda1bd2ccbd48eaa77adc400d175c2552d03b0f4a5e78e1ed7ee7ec37f36295b693b3a1d72fd955d2c1da78326630bf45128e3ec49a1a65ee8515f20e779"], 0x1a000) 17:17:53 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x81) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ef98bc17b8081d1ef505b7b3869a912997d9c3e27ca61747eb3c0a6cb0088b734ffe7da6cde8643e9ca34e5193e63220ae8bf06dbb78ef1a59e722f59c50aebe586356199a7dbfa13363411918c899f80fadf5051b96a9fe8bc6fb63b15b0229f8907a6b439ff95f55ed12b566baf780256131afb24eadf8"], 0x1) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 17:17:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000080)=0x3) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/236) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x8, &(0x7f0000000040)=[{0x9, 0x5, 0x1ff, 0x3}, {0x10000, 0x401, 0x27d4, 0x2}, {0x0, 0x0, 0xad62, 0x101}, {0x7fe00000, 0x0, 0x7ca2, 0x7}, {0x0, 0x400, 0x401, 0xffffffffffffff80}, {0x8, 0x101, 0xffff, 0x81}, {0x3f, 0x100000000, 0x5, 0x1f}, {0xfffffffffffff54a, 0xffff, 0x69, 0xffffffffffffffff}]}) 17:17:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x6) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/108) ftruncate(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) bind(r1, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @remote, 'bond_slave_1\x00'}}, 0x80) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000c659ca807737f400000000000100960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x1) accept$unix(r1, 0x0, &(0x7f00000003c0)=0x28c) fcntl$addseals(r1, 0x409, 0x1) [ 188.117627] sd 0:0:1:0: [sg0] tag#3208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 188.128456] sd 0:0:1:0: [sg0] tag#3208 CDB: Change Definition [ 188.134458] sd 0:0:1:0: [sg0] tag#3208 CDB[00]: 40 00 00 20 00 00 00 00 58 00 00 00 00 00 00 00 [ 188.143426] sd 0:0:1:0: [sg0] tag#3208 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.143454] sd 0:0:1:0: [sg0] tag#3208 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17:17:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x3, 0x1) accept4$inet(r1, 0x0, &(0x7f0000000200), 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x4) r2 = accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000000)=0x80, 0x80800) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x2e57, 0x3, 0x7fff, 0x2}, 0x10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240)={0x4, 0xee, 0x20, 0x66}, 0x10) sendmmsg(r0, &(0x7f0000008e00)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "bb1e081526295c11f2bbf676e18ab69d35c3d25f127638ba4d943166f6ebf0dda676021597631276992be512adb1f5919c951a1d3f8aa5f5ec6c3f40c2d746"}, 0x80, 0x0}}], 0x1, 0x41) 17:17:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x439, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) 17:17:53 executing program 5: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x1, 0x0) chroot(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400280}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'team_slave_0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x70baa60cd1f64d2f) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/71) 17:17:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x2c, 0x4) connect$inet(r1, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r1, 0x0, 0x7, 0x0, 0x0) [ 188.143475] sd 0:0:1:0: [sg0] tag#3208 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.143494] sd 0:0:1:0: [sg0] tag#3208 CDB[40]: 53 00 00 00 c6 59 ca 80 77 37 f4 00 00 00 00 00 [ 188.143511] sd 0:0:1:0: [sg0] tag#3208 CDB[50]: 01 00 96 00 00 00 00 00 00 00 00 20 00 00 00 00 [ 188.143531] sd 0:0:1:0: [sg0] tag#3208 CDB[60]: 00 00 00 00 bf bb b1 80 16 41 0f 67 f8 ed 2f bd [ 188.197185] sd 0:0:1:0: [sg0] tag#3208 CDB[70]: a6 59 95 91 07 67 56 [ 188.244511] audit: type=1400 audit(1565630273.842:40): avc: denied { create } for pid=8117 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 17:17:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x384, 0x0, 0x0, 0x0, 0xb1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=[@pktinfo={{0x24, 0x29, 0x5, {@rand_addr="54fa52c2ebc2a84fad201e08a7f8398f"}}}], 0xe17fc6bfec7bf434}}], 0x2, 0x12) 17:17:53 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, 0x5, 0x7, 0xa7e3}, 0xa) mq_timedsend(r0, &(0x7f0000000140)="28383770a6e2b16e361271098a4651b42f19bc21eab25d0401ac39453cb260b23644fa5e43944bb207cc80df161990646f7bf4909510d9f0a4e67da0c1d9a4", 0x3f, 0x401, 0x0) connect$can_bcm(r0, &(0x7f00000009c0), 0x10) openat$cgroup_int(r0, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000d40)=0x0, &(0x7f0000000d80)) setsockopt(r0, 0xca6, 0x100000000, &(0x7f0000000940)="97d301bc231e118d5b1a2241940ee6f067b77b28364b885546bd3c6226db8c073ed7b18590c8e39be0b2bcfc002207343b9138e195f87a64b3daeb28111e4f20e0b013a9c95e490c", 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum={0xf, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x6}, {0xa, 0x3ff}, {0x4, 0x1}, {0x9, 0x9}, {0xb, 0x6}]}, @union={0x3, 0x1, 0x0, 0x5, 0x81, 0xc000000000000000, [{0x10, 0x0, 0x3ff}]}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x4}, {0xc, 0x2}, {0x10, 0x1}, {0x3, 0x4}, {0xa, 0x3f}, {0x5, 0xa2}, {0x4, 0xc8}, {0x1, 0x5b6}]}]}, {0x0, [0xe982f8c0e036eb58, 0x2e, 0x61, 0x5f, 0xc2a5614945354079]}}, &(0x7f00000002c0)=""/211, 0xc3, 0xd3, 0x1}, 0x20) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000dc0)={0x3, @bcast, r1}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000700)={0x1, "7b1f0a9f85fceec34e58844155f4677e9b897ae3bc7b8e286eaf1ba5c4f8e55a", 0x1000, 0x3, 0x724e, 0x4, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000033001905000000000000000002000000ffd38d93080001000400100004000800"], 0x24}}, 0x0) syz_mount_image$vfat(&(0x7f0000000800)='vfat\x00', &(0x7f0000000840)='./file0\x00', 0x6, 0x1, &(0x7f0000000900)=[{&(0x7f0000000880)="f8d048c60c24010786ab33ac9a1bf37e38479eed24da5390b8197c533bf2b02928f9d81fe1f395a38d8a54c312ab62e09aae73ec7be464a547bda1972470bbbfad36c44a79c6c4ea6a5b6904789b89ffa2c1", 0x52, 0x3f}], 0x4000, &(0x7f0000002140)=ANY=[@ANYBLOB="756e695f786c6174653d302c71686f72746e616d653d77696e6e742c757466383d302c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d657ff973df6c17a85f7f3d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d693827bd0c35392d322c7ee434756d6e61696c3d302c7375626a5f726f6c653d66326673002c6170707261699f62e627599615f67989f2b401f9298ea070653d2a2c"]) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000007c0)={0x2e, &(0x7f0000000780)="5e3a21ebe90846ce62af6fa98d23ef8dada06baf6e45e2897182d03bf0579b7657c433058b18de7ca6a5080b4c59"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@rand_addr="f2beaf9ed7a8411dc442ecc02a544cc1", @in=@multicast2, 0x4e21, 0xec64, 0x4e24, 0xfffe00000000, 0x2, 0x80, 0xa0, 0x2c, r3, r4}, {0x9, 0xbae000, 0xda, 0x3, 0x7, 0x30000000, 0x800, 0x6e}, {0x9, 0x40, 0x4, 0xee}, 0x87b7, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@ipv4, 0x4d5, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x17}, 0x3501, 0x2, 0x1, 0x4, 0x7fffffff, 0x9, 0x401}}, 0xe8) syz_mount_image$xfs(&(0x7f0000000e00)='xfs\x00', &(0x7f0000000e40)='./file0\x00', 0x1, 0x3, &(0x7f0000002000)=[{&(0x7f0000000e80)="55afdb75742c1e4826f56fdc6deaf83481b16eb574a581e910f5ddc6eb4f9e2a63d9c2c2d8bea68fcf699538069133ef0a1553dabcf282349114bfab0f7565bf416175b6dc44714df6f6aa0c92cf2c7a34ba7afac20abe6e499acd9532298fdd153e2f8b1cc51d3a710fa0f44bcca418407a07ba5bf134f933dfdefb31c2fd9d689441ec5949e669b846e77fad9f4067c8b6395999a97c36cf4cdb622c17f4f2d5d5cbc294607ebd6f5f8b5d03a5578a016e5b6f25438ceb53cdbdd779c8cc99b938695858af1eecb2469a5d567949dbeec1f6e24524094854abaff78fc404f8", 0xe0, 0x1f}, {&(0x7f0000000f80)="f3e8459ace8ebcfbc6d82f7e3169abe36d7331d8c74a0d272aa7274bb6d8863d9c96790fe19fcc888bd7543991731107d6934685af08bc776e71980ac1662dc05f7409fb76df237929fe8cbf89b5770575df40d1f46cbd7f2ff31a7e06a4fe72405f021369b7a8355db76803ad2fabd77c5a331148cff6c84708435dad8684edd465314a53469a3c27a844a487a6f92309ab82b9f6f330f99865bd4b38e7d2621abb4fd5d825e16c79697a104d039c5c061c5eaf405aa7b4701858fa7823e0d81f3408e535d9fba53fd94c594ade0c97c5c304d2006d2b7807462e6d3658c8353c91c3f8fb4737839a336047f2209ec70df13117120e537a2c662226345468fedc853534681d868840c3d25b60c9f6831561ea0f9a7b3906bf883c21bb1049edd68296b6b4e0eb520fc8979701a5d4a6d42e25588f675d4bcf47fcbbc0fc118908db2585ac8cafadd926c5c8e06c33f53c72ed1a8acfbe5db26fad8beba23c48312f82b5b594ab0f2d8055e7bbb08adcc59736046c490c5810d32c9522f556a04759c71d097d51a737fd7ce8df969679cb9a5181e87eaa74fee981024a167562b841b113ede5fd454c7321afce6c78e621c5cbc53a976743e12f45bf829afa930612af2edbba8e622f6bdb62b8e66c7ba6b467317412ef3ad5caf5127685501c37ba0fd07619aea67fc1a21fa1308ba71437c285f599b0ccc4878caa2d5bd9e5af8c9ed05879d709b38500cba36a23b4d93fb14c285bf25c53025733da1d39560f73649067257da7622fad80ada76416abaefb5f824e9923bb682047b6ee571a4031849ea16b561e42b18c20c40851bd38ff6bea89a5fc8e48dec3f97fba1627dd820dbca847ca8436e2eedef49785a9bc63074affc2bcd6b654cb0bbf41ed27733ea718a338d29830640dbe0833fd2c338ede7626c6f5bf18cf073e4f0d57f5eed495c7600bf8d3728aa90ab8c21cea42f912a580ab652d3967f12854cddfb84523d8347ce3ccc4fa4a32f2ef2d7276ed3a24f7fed183d66a72c888e83cd441e0d8febb780e4e17e2196f7db870a85ac7b97305c4a712470b3c0dda077392a563630d9babd7052a353f98daadcab8df010e3bdf2b002e47220b7f78ee834342e9e224e62624003136a05ca212e7b5fe19134565fd929d84ee919ce3d975dca0a76ea6f7a7bad134561caf126854b6640b724997adf4e5828564d8c1742c072e426e34d407102e3c511b3a23c2763e2c88c892a838e24d8a0c7304a9ef3d845c2c5319bc2aea15cc9e4eeccdb093e7c1569997367f0084a1e02d20cdbb1abd050859138b03d574cfe6de98e8aa83029368dbef20961e69aa431f1595adf40b4d1ac5aec83a2cba92ae8e4eacd8dfa9a4507b27447e893cdd9827df54e845cebacfb5582d755079bad3e75ba81f7fb69fdb3159e63922834c00631cb9942ed3619b79cd61ebc2ec5fba2decdc477f5ab36b2e284833121ae6597afe1a75a75dbff2b03c1799b9625db2fd6e385f5bfee9f7501399f8155ed5fc2cb2d2276203ecb829e4bc7eac381c4690b13e13641df1d86af49b91588695bbe3c6dd6e413965f1aa43a11184fe990885307c2b98e1e06df4ba5c2ffa6d823fa94e1541fbcc4d9fec58f9cdb58ab0b9b9f4b25053542f0a28b29c0ac30ed134bf95a2bb08ad28f3db3738a1d61fc6536d4de4d60cd7f50573449d30ff64bcada9d718a2c1aae0157597986861a2a08d31fe0a2c329ec7b0210fae8bf60271e6799a0eeec6061de3f794cb7d50226d42a5e6e788e6720248ae2c7ef46b0f928adb25abb57774a47471f9b9f231f6f5d7aa6ed47bb019165aae1e4d0d50f026c6ac5640a927389fd74362a52bffd715308c6ded48e71d4af916a83be91d90cdd07b865675349cdfc1f50b8ca8462d40ee6ba96b42d0bccba52c2fa86391f34459536bb8b2a60a8055e5059f739682bbd454bd74a826203a732d896ea13fcb20a588fe1fff6edbcac292dae1802f2ba3229b4b60fcf6fae561e452568c6a3a7841559dcd282df4fb9db01f5a56dbf865ede4d2fdf7716db99b3c72e42d8758a42b2c2ec211dd3a1a6339474bae5f3cb6d8e8cd9a8ee1ed33a8a71dd07ab6ebaf1491dbed48b08fca1acadd3999a0c2a1bfd2474ba2d6875db67b2d14cc01f2029a6272a10145eb7b5b5c392f53683af57022c3d02fb70adc7f639290d85bdc3915ed3f1bc987fe33db0976597ac7e29eb415592e1f53cc881bff88e12e68dd6f3d10e1553316a2edff51441d8b62d763b52c23a5d52bd378111bdc45af2b932ea30b253e9916325844728d1a6a50f0ae724530b3370c5975ae7e2d38b28d7ddc36d36e321b05e613ebb0442328049d7e1d13c05e7afe58d21bd62bd2f7df0428d0d56d73c300e2b20e45a0d002c5878108f294b132451fcc66924cb0b2dc71b448b4c2403f31d75f64dede83682b21612a5ba85a5bf2bda80e1e9676461be17b5f26fd0e965a2e8c1f01a1ea850466a56908432b419ce099f2cd66e8fda872f7615575025450fe7b38eeb4cfeaebc84570e74748add93bf1eea0fa6a2fb824e79f483a6691da97205117fbfaf17bfc696b13f76c4e674eae55ebb8024f7c38c9184e2447f52670b07fafcb063150d5201423f7693ba619ea9b2bcf38899bf4613fdad8d81c4acf48ea0ad5ce76a5206bd811e0a1eeb22c8d0763c09a6b5b76b75ac885d9da70ac31b91123593889a2ae68a3c0b71a3950df2a93eb2e41b8d26ef9a46a359216de1ac82762d319241ff3947a40b04380cc88de3eed0461f509e0d574aa46573cc674b16c31bf473598460806286a67606c4b8cee4c80c3344bc6e9297aa8c836bd803be80017a672bf0316aa87f905903f8f7171582d54c07ca7fb06d66c5935987e491128bdc3f50d5fdc33536c74c1099ab7abd2e1574290f3719faa5826e8f39f2b36eca8c96b6efcd06ce2c8477f0d40c86ee776b1dc2a10fb46013f1ddd316979332452a2121ef89c5f9ac61d7d83262badc3970724536f8387c4f9af27217547d55b23a0c390658403ab079027274fac7c9aad2a52df3659182da928ece507967ebc3a624ef92bcdb4f7a52ca7f8c73141f252c116f9dfbe49f8f4cdbc2750316eb17791181b879b1d493f61668eef35a46c12ffad52c3febab8d9c676d910fb6c58585452a47b250527e252b1b174f2dfa5e44cc411ce19773944704d7357fbd112748460b269daaa87f4a62009d95766bbf7f6aa9a90d8841d4afae8434ed512425bf2db41859a8fb809b17801fe1095c2db9a35a956149e74929e4c206e78952f3b0d78a4bb4e1af9054be39102bec1ac32c4aae7cd23cd7b7822760c2d4169596d7a178193193f7242dcfd762336e01b22fa140a7f4e1162ee161cf8bc14df7dae83d069c457cad072d2eb190f15413f8adbc5ab30adbe693ce127487967a8778b2826bc4b4a51847b10779b3af34f800cb79b171179f1fceccb9c577877fc4724a296360e03b5b3349be7a7c37c00a73a12867a5b6273f6668a30ae78f90a72e3b81f192bd5de5ba78bf303e073bc07c3b3cb09ff44abde0252fee36b861638de6eef727a71da2e547ec12d9debe7ff532c57cfac0d44df1a0b853ad100ba3ad51c159e2f0a183561cac670228cc216a451fcbc17fa44d5104577edb36b42550a10327bb25d3d09dbf30a97ad5cc516f270583f8de4c9c2c13c0964ccebbed852a483adfd78aac7810962067d9f9997ae2ef7bf7d9af0abcb78747bc0355e9ddf180774e6b3a17ed6b020b6b068e7c1d5f014c3db630123f65bc68a444601ea08f54ac27b9d9087b1bcef6710e84e1e29685337b7914b91a15842e0156d18a1231ed694b47114b81a694fc383263b944f48f606ba95c7af635cbc5cef98d72448fda3ebff5e0d7b868eb2805bf594b89c35975672430288849471fb9a5f30f66a11adf6d7b33b500ba94bc614ac7968faf467cf31c46acefc11a5115e0c9c5e916c48df6aca57844080997470756dcc39836ed99ce9c2f2fcd7a4d76c8fe51b6bf6f577e11c212728c1f7ece0931026a1cf2201942996817a296661927e6e399a5323c219376cbd69e246e2bb33a7b5cffd3e14868296f5c1694cb1db90e1f5898a707c5a0c52f95d4479738b56f8393814c25e898527341c22d08e2f469723ce4d94cf12f55c076edaecc94805f233aeb2dc18e6481908aa27c81ca87a41bc9841eae651f6038e6d9ecf6616f5893a9b382856e2c6d302ce37610cd763a4e9171fb2ba5e84663a814e75cc7131d761000ea9d399bec74a5dadd72be7036d20e1c3f2e3a0c4c77d98fb2faceee9df3cae0629bf70c8b0271ca701c43e11f39d0b912b75d2e6779f69e3b9688e5fb4d77117e6a441ddc0be0f712f126e7be85084599c9aae7b44697defda844b2897a9cf3600f4bc8dfa237a27a46273f7cbee9490419c726e58ebff3b56044c797dc166f222cfd05e1786c8ee1d17e3756d7cd2e59b6d1e9fb7f8c088d96e3e9da68546854687769fe1623fd4322ddecdab024a6b8f74bbc68f032727b97deaf45c8a93278d22b4dbb81e43783fb8b406de45d73260da9190109a120d2d46bb4211efea8f00678142a2cf06e21a909b75936852a3ac0e098344aab2eeed1174bf2479da2be38d1e5fa75c9648d8b912721bdf574ad12471294579064c15e7133621968934fba974ec5569d6dbdb451a068b035a849add308481ca916b6b85ea7aa543e60197e50b9a95dbfb263fa8016583fdd51403e6024e58474dc1f28a08023385861cb00fddb003c8feefea75e47b1f01bb7d2cd7a7f7dd06cdc6eeb90fec5fc6e3fc607360dd3d54fca54cb510e9d80e2eafd18d9a28e2580762628d8d5141a70041be3856e091b3cf645f45fd24b9117c3bfd27a398c60a2436c113c0eff44dd26c6c249e5247092c8d884cfc592ef7deb6eaa65a21992101895afaeb5bbcad431646e65c2785d1035fbf08d69d379b795a0c5b74d43bff148055a5e694afcb7d1402359430b761cc837d1d570be2f3c66ffbf6837b661637821121bf05a5ca923463b76d8a32f0a0cf69be6255f2b9d7741b4da0787bc308a641f13aa340263b83da7ca304864f01f37743e88e64bc6298bcf56a71d5172971f2b0dad8c7840b7ee89da4ca99b6f424ecd98d7522144979ff51d3a52e9cc42d9bd85ec4b8cd07e43c9ca0571ffaaece8a2dca028a6a570f713259d87ca738b60eda14c5c049261554126a5ae7f2ca3674d00876a2c6019ddb6cb49b4a0fa3aae8ab6e95cd88487c2fb9b49ebc4131c999340a8cdd88de1409df93f63d47448392d5c6791b95e90086ba0571a762101ea13e7059d88e93de846486141f455adccdfda67c237e21c0e183fa56377bd446ae34739297f9370d89bdfc2333df8886016711b396761a5392b0d23b99aa8e763ac5279e4a7dfdf20ef4477d2445fdcd1524007445dd49d8dc9c8f434782a52236dc67cd0c93cae892e4ffe8ae383eef05eb020d073fe84626db5511cd6b5f022b0523f5b71fcfdca259c6e9439f02090c0010af0cac484522733e290e05779f72b5dfe9c71252a2c26d212122b065195375a76f46706ceff57ccdefb378cd775f0f4098c2965e2afb5661c3a234b3bcc17cd33cfb29e2b1acb81db86448fe8d1fcc268d9688057454d7b192a489071f83a8206952c1853e876abdd14b3aed9138a3be9e884945ba8d20e3e7c9afc472ac2f90b201d8d05117da4517c7efa9ba22cb225f8e9fb91ee7851bc0605bb295596e2367df6966a431270f432c606d11d3fdc1", 0x1000, 0x8000}, {&(0x7f0000001f80)="5d9b34e9712621e44c8e9343d96b1ccd4f27a4bcd6ecc23810bf3756335070cb425b02fbc71c70169989a8cc1e2614b74a7bbbbb0c5df7e500ceafe43caa56bc2804ed7123ea0ac9c04a5332930fe3f9dae46f6bc76e560369e3206492c3ecb9ec16abb891ad5820100295", 0x6b, 0x9}], 0x80028, &(0x7f0000002080)=ANY=[@ANYBLOB='logdev=./f,smackfshat=cpuset,fsuuid=q6f01086-a251-a0{\x00-da45-8b0a5\x0083,context=staff_u,seclabel,mask=MAY_APPEND,fscontext=system_u,dont_appraise,\x00'/156]) 17:17:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x439, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) [ 188.328389] audit: type=1400 audit(1565630273.882:41): avc: denied { write } for pid=8117 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 188.400653] protocol 88fb is buggy, dev hsr_slave_0 [ 188.406031] protocol 88fb is buggy, dev hsr_slave_1 17:17:54 executing program 4: bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3dc, 0x0, 0x0, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'teql0\x00', 0x201}) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) close(r1) 17:17:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.me\xfc\x8b\xd1:m_ha\x1aX+', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4c0, 0x0) sendfile(r1, r1, 0x0, 0x7) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='vcan0\x00') [ 188.478536] sd 0:0:1:0: [sg0] tag#3208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 188.482419] FAT-fs (loop5): Unrecognized mount option "qhortname=winnt" or missing value [ 188.487498] sd 0:0:1:0: [sg0] tag#3208 CDB: Change Definition [ 188.502017] sd 0:0:1:0: [sg0] tag#3208 CDB[00]: 40 00 00 20 00 00 00 00 58 00 00 00 00 00 00 00 [ 188.510985] sd 0:0:1:0: [sg0] tag#3208 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.519870] sd 0:0:1:0: [sg0] tag#3208 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.528842] sd 0:0:1:0: [sg0] tag#3208 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 188.537798] sd 0:0:1:0: [sg0] tag#3208 CDB[40]: 53 00 00 00 c6 59 ca 80 77 37 f4 00 00 00 00 00 [ 188.546835] sd 0:0:1:0: [sg0] tag#3208 CDB[50]: 01 00 96 00 00 00 00 00 00 00 00 20 00 00 00 00 [ 188.555802] sd 0:0:1:0: [sg0] tag#3208 CDB[60]: 00 00 00 00 bf bb b1 80 16 41 0f 67 f8 ed 2f bd 17:17:54 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcac, &(0x7f0000000100)={&(0x7f0000000040)={0x10000000005, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "207dd549815de917"}}, 0x48}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0)=0x3, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x7}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e8d2c754d89fcbb6"}}, 0x38}}, 0x0) [ 188.556169] audit: type=1400 audit(1565630273.882:42): avc: denied { read } for pid=8117 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 188.564753] sd 0:0:1:0: [sg0] tag#3208 CDB[70]: a6 59 95 91 07 67 56 17:17:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) getsockname$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000a40)={@mcast1, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000ac0)={@empty, 0x0}, &(0x7f0000000b00)=0x14) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f00000000c0)="486994c21aca41747db65005ed9f6a2c2250c251a533a4195d2e582d1bbce655467df5b70f49423f6c8bca00bd63c8521b22f575e6dcf2f8ecca7fee598ea610a552fd1777eaa936b0e47995fa374c02114411e0c85dea55286b9a6790d8908ba7a7aa7e7409c4b09ef48f18161f5e43f0d4c7df43e09bcf8be8a5df8094e5ed3a9082ed17caa59885a001bf52adebe93ccf296ae06c7d8842a3324728", 0x9d}, {&(0x7f0000000180)="328fd6fee0848aec56d85a83115cd0863f5c825c3e7c7a6de23ef0f3e9f39f74cdb131df80845f965ce9a41945f3401589ade9e0b6fea1eb03eebd4a0c2451f3f1340b486109c527842c1dc71977aab2f1bb6bd3c45447317db84e40f0aef3d70ec39b957673e42a35a34e69e261e41aa7c989690091cac1757ecae336b7debefc0df2e42b8b216061f9ed798b5ff770d77b10e13925e2aa662c3679d313344eb2d9efe2f6101e86c7c0f6554509d46746f1bedc793af46d4aeb0e7773445cfc3c9f8cd37814c7aa30d4a151263df37dd348210a7630b34c6092eccf3b4d7d6ef5d38cc4b0699cce8915c303b037ef2c33288010779515f0c2", 0xf9}, {&(0x7f0000000280)="99e6c01ffe05532b8c4bcf3ac227db35cd311683f5ecd0d305102322d15cee0db8532ceffa91e0e74e7d2bfab2298bdf3cbafa311b8ef3e52c8b98eeff0b390f145207f787ceb7bdfe454e6592fb2c0d1546f4feac3971aca2b03d1fb433838a251f468ac2fe6df4515a6330daee45cc928ea4b7fdd78de2dfc6987578c6b2f75766d867851ad384832ac7d0bbe404", 0x8f}, {&(0x7f0000000340)="5bd72c03ff461610d90c5658ad26cfb7e9d54e50d08a0b4faf8ee6695b6821bd9f2a79a154a6b814403f41ab81f49cd5a61cd1dbb3d9a6baae72239bf1fb16dd717f4cfff032071c2d24d88902bd0d0d9239fac8003053b97020d82a92a933049f9891eb4873a0a361889809041d915748947f3140f7fa21ccc5d53b4420c7e6e9d2640fe51b8877a1f8a55c8f6c0d5dbdbe2b9f6a45dcc9c0c2166175052c17971dc3c17123c8e94db7e358090b7321a735c29d7c0bafd1231d8f01cb8cbd003c43c6b039972a7bcd9009c54354fcc840278d833751312c9d93f70eb7", 0xdd}, {&(0x7f0000000440)="a686e7445bab70ccc8466fcbe22fc0320272692eb70d673e5df45f1ddff7ea977c61156efa89822415cabe792f1009a1d04d0c374c614fdb375e397420c69e796ada90b92494de52802d4634aa4c171495aeed1437ca1a9c3f76e38f15635680ef4de65b45b36a717c24f0ed7f28b2f59c6e8d3fe41bbe287d8f1dc6028d1c057d6ab50baa3a563663d74c0ea466bd6752517280cd3e83be2a29488e5e492766bf8f853d0db931ef8e16b0e3b3b86424e32571f0e35e2f4f21d1cc47adb6a900da90074caae176901521540231b052aa868df05085228d64b7d7cca75bb943634edb5e42aef4a1c4c2e5cdb49164727d1f3a4819dbc5", 0xf6}, {&(0x7f0000000540)="90b8e5fa1086134c35135e563d62554e6ff0e61b70e813e6a017c72ca9299bc77a70faaa1ee9bb641e015c14e498ff2d5d00992df449f18f0430cc2cf9cfd18aa7c6eb874557fd9f7d867de3ee118cfaec92bdfe45e5e4042cd9feae75ee42825b1c8c013cdbbccb92867af61691b212b83c95876cca2ee87468bae0c8de31413709f4d2ce050ecdc8728d85fa2b9835d3e7caecd24505dbccba8595b58905c44940a877c5235d91cbf2c6278552c4fe6bd4ca83fa", 0xb5}, {&(0x7f0000000640)="906a3916b474e061b2b2a2dfca96d6a430256123ea7a5d73f95acf04bbc33c3ad559087dfe9ae6b0ed4ce7ac64b5f142187838c426c6eeed50e0d0c5ed108bf7cd0c9e3aa9156d8a982012d4584b5b4f83492d34643c83f25bed4851086d43d277d57ea33306231865d065eb48887f30aa6289ebf5937753aad379051e3f91f126bc7d", 0x83}, {&(0x7f0000000700)="bb1dbc5ecb25eaf4853555b4696356749d62936c093f830d97242d01becf151bae20f2fa4a52e53c8b6beb7135aa1f42b788f126febbc16fdd2f34c13d885d55eea772d51b8d72044690fde3624462edf3fc00b13805dc6fd65bd9ffbeeed4d563f66e4707918b4bafe06c86de1973070a320b7eeaf58fdab80b7fdf2a914122923ae2fbe92dda7b0e1b6aecafed8126f004529f31ca91bf3344316f097ce113f8ed91c05d5c20c141a6efe00342d334febdfcfcf0", 0xb5}, {&(0x7f00000007c0)="0742b598457747e5f01836de3f1aec54d01a7d0a19586c98a4843b7cd4cb397d2e81c1742c8b64b35d55bea29bfefb0847d4d9c47f5f1ac31b446d6802163df20e0c20fbe7ab785a4b4e1f512e3348818e6c50696a71088978a1eb71ef30986813c07d6f902f46502a2d1a78671ac69759cd388c57fb316a691d10d816ba3af9232b83b29eded3bb0932f9ecd11ca47dd3fc3091d522215d834ba70b0310d663934ac0c90f5c1334779bc3eb387d5dd90f54e257e3ad0061d04f892c464d766f50dcba6a345408b68a654e", 0xcb}, {&(0x7f00000008c0)="d04ba54b91f9d64022f4344a76778356f70963838325cc77cbb267280e477200d0a08cfbb6bff4", 0x27}], 0xa, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x8, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @empty}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x13, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @multicast1]}, @noop, @generic={0x82, 0xb, "eea41387761310c2fd"}, @timestamp={0x44, 0x1c, 0x78eb, 0x3, 0x9, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x8}, {[], 0x5}, {[@broadcast], 0x81}, {[], 0x6}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1ce}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0x7, 0x10000, [@multicast2]}, @cipso={0x86, 0x29, 0x3, [{0x2, 0xa, "cd2bbc8bf5fe3d55"}, {0x6, 0x8, "c249d37e2b8a"}, {0x1, 0x11, "5396bf3f7c8c4d524196ad7bda0ccf"}]}, @noop, @ra={0x94, 0x6, 0x400000000000}]}}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="692f65bfaf68da474c4e70a7fb65fb75adc9d90b70b713dded387b510609943f8de9c1d70b04c6e89a04902bd2ddb35f0d01ed5c46c658d62e3cb547d5424d34a4a2f4bc514cf668a7ed5d945353cdaf9f7a2afeafb9170eeac71803dd32fd312515b2f8be700581a37e32d372eabfcad007f4627f7e7a6e0b037013eff666924610ac2bfa4e8c96c97fc5aa75790b363609a9c9200127b561c578cfde439621164a4e1d99f037f08c015151c64ac875b716edbd992d0534a53a71eaa2be6423200223507e66b199a4c956181c1659905974b5fbdeb1846fe7f154e4c236c9ad9d586332cc92", 0xe6}], 0x1, &(0x7f0000000dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xcda}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf8}}], 0x30}}, {{&(0x7f0000000e00)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000e40)="b223a2db59ed895a2a75427d63dc5b735313c4aa287ffbddbddf22ad2ba95af9e4592b63a7cb2dc073c99396a04c3c5a9c450f6a4f367663d68aa02ff522a6bc3ddb2d", 0x43}, {&(0x7f0000000ec0)="ca596719ac70555ce55f936968788dea900a13c2b347f473", 0x18}, {&(0x7f0000000f00)="c43d8ceeb5113ea773ebf1eeab40bc167a3815458f", 0x15}, {&(0x7f0000000f40)="7f959a13d8be6c7fdca843bd487474ad8760135da682302ce8342a8ee7081b9ba34e3dcbd120d08fce0d23fcbbec0c25d89f114bc22629454c57583087784ba38784287e3558c81e1c50e90feb461aad0937a77836614064f7e120bd0eaf26c1fd85c43ef780", 0x66}, {&(0x7f0000000fc0)="df6ffbbdb664edf9389face601bb085ebfd0724e7abc6a8c7f40331d53f6aa5a4ec62d2d65635a657cc9800d5a06b6e311a638f2d6888458db132efae763407fcf4f9f26bc507ee3d7ea5cad6ba4", 0x4e}, {&(0x7f0000001040)="b56682077ab0881c2955dfc8c9a7ee86a618ca11833258be374091c8c64e42d08765df793040d149112f05c5bfa6e0b8d81f894f8c7fc08c8c53642bdd6202fcb9def4bea57d345cacc8f9b006a4b07ec940176c5a07748182f6599e1643ad195e8b938bc2a9512a55d0aef37998d4d691bfe23ad6cb3a1d783b7b8a37de7a962527daeee9", 0x85}], 0x6, &(0x7f0000001180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x3, 0x4000000) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) bind$bt_sco(r7, &(0x7f0000000040)={0x1f, {0x58, 0x4, 0x6, 0x8, 0x0, 0xa7}}, 0x8) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x3b, 0x0, 0x0) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) [ 188.668990] FAT-fs (loop5): Unrecognized mount option "qhortname=winnt" or missing value 17:17:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") recvmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 17:17:54 executing program 1: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x5012, r0, 0x0) ftruncate(r0, 0x1000000) 17:17:54 executing program 5: r0 = socket$inet(0x2, 0x4, 0x0) sendmmsg$inet(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x20}}], 0x1, 0x90) 17:17:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000004c0)={0x3, @default, r6}) ioctl(r0, 0x80000001, &(0x7f0000000700)="df4f86274593ccc66f70a8578fc30e9b2eb73057094ce9") [ 188.827942] audit: type=1400 audit(1565630274.362:43): avc: denied { name_bind } for pid=8158 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 17:17:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) ftruncate(r0, 0x3) syz_emit_ethernet(0x211d49, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa09000004000400000000000000000000ffffe0000002ff02000000000000c426480e471f8ad78300907800093e84afa580fa0000000000000000000000000203ffffffffffff00000000000000000000ffffac14ffbb583eda014c85044486bc46d639ac956011223898433121a26cfdcc4a592a5095bfb1d0ecc9867acc900e"], 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev}, &(0x7f0000000040)=0xc) fstat(r0, &(0x7f0000000080)) 17:17:54 executing program 4: bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3dc, 0x0, 0x0, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'teql0\x00', 0x201}) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) close(r1) [ 188.932560] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 188.932560] program syz-executor.2 not setting count and/or reply_len properly 17:17:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 188.968575] audit: type=1400 audit(1565630274.362:44): avc: denied { node_bind } for pid=8158 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 189.075467] audit: type=1400 audit(1565630274.382:45): avc: denied { name_connect } for pid=8158 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 17:17:54 executing program 5: ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) gettid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) unshare(0x2040400) ptrace$cont(0xffffffffffffffff, 0x0, 0x5, 0x9390) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getegid() getuid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x700, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x1f, 0x101, 0x7f, 0x74, 0xaa5e}, 0x14) 17:17:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x23, 0x8000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x1, {0x100}}) ioctl(r0, 0x3, &(0x7f0000000040)) 17:17:54 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000000)=@sco, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000002240)=""/248, 0xf8}, {&(0x7f0000002340)=""/76, 0x4c}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003440)=""/122, 0x7a}, 0x5}, {{&(0x7f00000034c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000180)=[{&(0x7f0000003540)=""/95, 0x5f}, {&(0x7f00000035c0)=""/237, 0xed}], 0x2}, 0x7}, {{&(0x7f00000036c0)=@sco, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003740)=""/100, 0x64}, {&(0x7f00000037c0)=""/237, 0xed}, {&(0x7f00000038c0)=""/126, 0x7e}, {&(0x7f0000003940)=""/236, 0xec}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/6, 0x6}, {&(0x7f0000003b40)=""/56, 0x38}], 0x7, &(0x7f0000003c00)}, 0x7f0000000000000}, {{&(0x7f0000003c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003cc0)=""/14, 0xe}, {&(0x7f0000003d00)=""/73, 0x49}, {&(0x7f0000003d80)=""/175, 0xaf}, {&(0x7f0000003e40)=""/222, 0xde}, {&(0x7f0000003f40)=""/115, 0x73}], 0x5}, 0x6}, {{&(0x7f0000004040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004380)=[{&(0x7f00000040c0)=""/211, 0xd3}, {&(0x7f00000041c0)=""/95, 0x5f}, {&(0x7f0000004240)=""/211, 0xd3}, {&(0x7f0000004340)}], 0x4, &(0x7f00000043c0)=""/153, 0x99}}], 0x5, 0x20, &(0x7f00000045c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000004780)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000004740)={&(0x7f0000004680)={0xa4, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe6d}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xea0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff09ec}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x10) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000200)={0x0, 0x1, 0x4}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000003c00)=""/17, &(0x7f0000004340)=0x11) 17:17:54 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x73) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r4 = socket$inet6(0xa, 0x5, 0x2000000000000000) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$addseals(r0, 0x409, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) uname(&(0x7f0000000580)=""/86) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r3, 0x210, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) [ 189.220688] audit: type=1400 audit(1565630274.502:46): avc: denied { map } for pid=8171 comm="syz-executor.1" path=2F6D656D66643A620A202864656C6574656429 dev="hugetlbfs" ino=28882 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 17:17:54 executing program 3: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x7, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd61588404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252166178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd87689dbc02a484c345c3eff254b66f1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be83121f47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="000126bd7000fedbdf250a00000034000900080001007f00000008000200ffff000008000200ff0100000800020002000000080001009505000008000100060000004c00010004000200180001006574683a766574683098625f735337bfd35f746f5f7465616d0000002c00fb001400010002004e22ac1414bb0000000000000000140006000200540187a885674e210000a00c748d1bc1158961015dd22475c020cac6ad72c1e3c9feecf6bde085d9356775fc7a4e07be5c6be4e9633fa0747e270ffeab63fec1dd2cb99d5348c50b1230c719f0959acde8"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 189.359359] audit: type=1400 audit(1565630274.862:47): avc: denied { create } for pid=8198 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:17:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x0) [ 189.395901] audit: type=1400 audit(1565630274.892:48): avc: denied { ioctl } for pid=8198 comm="syz-executor.5" path="socket:[28576]" dev="sockfs" ino=28576 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 189.425810] bond0: Releasing backup interface bond_slave_1 17:17:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0xf401}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000003740), 0x1000010d, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 189.587882] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 17:17:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = gettid() r3 = getuid() r4 = getegid() sendmsg$unix(r1, &(0x7f00000025c0)={&(0x7f0000000080)=@file={0x345c3aca3d711f96, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000100)="9275755ffaa1ad45ab6e97dd0f92ee5e3a0d2c2e8384fc44bc213de7772147b93720bd430895558e9a618e506ce83697a5a0e43f4c7e0c22fdae6b74b4316433fd0ad33fed507c1a5b68a29d9ae5d2c10faee2db8dfe4281b2a986cede27ca60054f13ceea074a0c331dd413404ea54836216133f80202c3ecbded38db9d2a3eb9815ba702df667d859fd74c7cdff26b24e45cd41d914f71daef9b6bcbd24665554f8c686a4f43c93af8a28ea9d845566d0337115020be8db2b60673fe", 0xbd}, {&(0x7f0000000340)="6d6ae773f4b1b726521941cd9094b9700b57c5277496895ba63092e5f137692a7ff71d7ef817de9bf3a1d6528f01d1f3fadb16b6ba16dd589b527ae548dbee20cae3eeb08e7d40eeb0671864d60d55ee35828fce461d974a955a2def40665bdf3053a7a9ee25b76086d53906806f30f4ae3d3b54ec06201c8afd12ea5295e0c71111e38338acd4f935b315266c3457c664adbd21ede509f8ca895f2a31b14f59cf47537aa0062a00298669f22c4b2456dfae4dd46b88633e841177a6f10bd8abe1898455c8ccb47f5708a376f23d068374d2e72169a2eed8ec9a85e16929cf6851f25a002903bf13e1b4e73ef9c75e179f5c5413f0b2c445741cc3d4d80978e28d689fc97268363adc82148b8c15b85841360e59b952c04c1a97858e4a02bff257c2f69a4be26d4ba337e1b2da3275049bc90339a41719faf3dca24e8f780bce8360efc50db928839cc0c5442397017b8aea53efc474d8d883b2c6dce3fb6de24e163d4d84cfa731398bb3a741b2dc34deb94607d5027ec80e418b77f5f8c2f4c379bb48c4949ae6231f477031a5775f7625fb1273937609f1ebfe320e9ff1ea3bda0db7c39a2bb56661666ebc1f108966fc75d7ff9d4be621666ee01373055b769cf25569c016fda01261e48e28a27d4bc6c9d0d4d5efb22ec27d57a85770048e4812d571e5bd49418e3820c73beade1633cee7ff6b8472bc6882c666c3286366b22a3e1b3bbff863483004227e51af03ee9b98cb742c22f7cabbf028b65471d99dde11381fcf46ecf1e4026e3c6ee3d6b397132c9a53483b3ea2ac842097cb5427326e89e7e153f2966b4c26d5cf78d1ba713fe5cb46da39a333c3b3a29e6fe5715e47a17c9a2bf2c57f57719c6c7939133db2e30d2a4e62cc71a4deabdc5c2cfb383f1eb49d726ae4941b79c6ebbcd0da2f755fa2ec36389d04904c20c6424364d58a8fb3822771094fd43f638e276ccba953d55ae5c00f9451a7d518ff41dd0ea563fcb7fed1bc5b6def4f4468b498b2f0df5c89dca0fab2fcb37a6eefb48f2e49017ca8ce256544e9e98c001dd5b24b6a00bb7bdd87d3a0b969d21795ba256aae6eed296badf9255baf118a190812b48795c77e794309dbee210ffa2933398744646580f4832b9b40ae2d2f3ac944c1be47b426f8bce071d34d2b3da5bfd630b3c017ecad35fc227d9c74e3383627a83b22204d2c556fb66a43559fb75ce07184e4a81b06235d4e2ebfd96bfae0a6f4ca179962c8b4c37854c959308ec43b30ae88945159cd85437f4bd654b078262f35dc5638ae914f0c32239484946f1cbf9f3d2e882589f6fee227284d9b502d96549afe688c06d937e632d0ad45dc3da9192d227c8b1f4bc23c935ab24dddfa24167b667b7f0c1347d362e712382b2d53fbb573f67000c041222e59f2ce66d98a41bc95f3b2bf106476f8897eea59afbf032d9be63044e83a0f7689e2a1fcb69b41ae0c38108d1467066f2217e690a40409f156dd7b19566abf7c4ab17875f90258183a54322346a9f3e9059e33c8115796302c7170394a18929b89161cbcf3a418b22c9b5e6a9d7ee8e35f9c469ee951e7565ddf46909e9fbb8dc1a74ebb4b7c0a5058d43efded183e56762dddd37d8405033769a8b4a6a77ac305c8146577d344da23e899940c27ef046c6d1f049f589dbec4388ba127ba5959f963fc66298efe850875635e2c29c195cac6bd81c28bddf61698947ecc588e57cf3c267ff07a5bfd3b4dcaedecbd671b3e370e79d93363342f04eeeaf0a7634c28d3cf08055dc95a575f2ca89dc5d26e4e1f3411cbaf14d070181a23c96038b55b17a556245812d88780a640d839e2e48e88237e0a5cfe3e650a0acce9815756b38bcb7e4395e3657b337e76cc531e39eb3a6507a44304d5c1097a986730937fe92373e5147b5751ac09f843da048164b21ed04226a21305dc98485790f92efa6e79a4595370e6aed4d7234f6b8cc1ca88ebda88438fe16fd04d576a992ec76c85b0f721943ccbba292f25892679f5a601aa87ea962b945bc7d11d96b789c463e7a4a346acda7bbe0cf18dfb5792fdaef8b0c0ddd7ad72a7a10e98c0ad5be89a00c4a763758da27758de4d57f62121e8885d0162af9e03f04e941a50306b093d6feeaf35a80e10ba6cdd953df723cbf7d0bd42ecc7a59af8e37ce822a77fedfabcea7061a71f491339fc1ff35baf930862a1f4e2ff3d853555139ff10314cc3c96db651ea221d765b9e5161e14bce43e69ecb6f8d23e4a575beb333eb7ef81772bb9a13f92e5009ac974c98bfcdd281cfed37c22a417a8f237dd4ee17eea7a0b46541b87dd67501f3eec255dbe96685111540a495e5c623c8c50f179ba2a090c7c0060d48b9ca81bc403709d138c17cc0ab97808782b6df82b9a6970a1b8157fbc1e667b8faeddc0f6253bbb159f6d23002e438d989430d89e52812b9b121fbf55476b0b5ae2fdcb7bdf0c85d9ebb25ec8dd9725e77b90dae00093f3ff71e527b09cc37835f47927d8e82926781f6f75ab8ff24e8d46cdd5f2f87ebdf7507cc45bcd236c7bc62aa36d46db144b6814b7c0796b32ed85165fabcd7bec4cea0662458921e45d5b3ac18320008caf6a300b74a5543f5206550669a8d007c577090c1138f4bc569b99a2b68894d0048a5ed09660cb6ceea7b670b3e39792eb35938334a32aa07bb7f03072dd1d271a60cf08936ad326e3dca5b62a49b90ede15ec1cdcdcd34ddf42c1dd6f0ac6bdccd864f547e20805178f7269253e9bd8cea60c01ef7d9f8c83d07c1a0224de4374231cc79e8d608d1da2b4b9583f7ccbb4439adc9da58796fd7e4205b0c1a2ecb85ddda7aa30cfaf9b3c51ce18d34aa5b4a057370fbfff2c61b335ba090689b96df417e7d2388759a3c94f40f8f57fe0b03c8357194fd69f290905d9c680f4d64ff5ff75751cabfb1aed6dccb2050788703403157b68dde1bf90fd6e3ef924720e6dd38fc046ebd183614b89559d7031f7b8a89ff923dbfd4d63c0c2e4fee5c72b916fd9ca5425bc62f1937c1f9eaa3b50f1841bbb06c2728c37baef6dd2d7f3427f3ef624298629dd01ed454312cf213be79d66e4f9897647bb415f9c4167cdcbc354550893d5a58c2a991dc8a3497ead4e4f90afe8219aea17293bddeec998b6f6c30ad46ba043a42cc2b3f750065c2eee2e631cb9153ef46ec1f3a67e9c3b621d94ab31a8efe5f260bbce55a23b5c17c26a59a80b045a4b435816d189715e32cb6d62f188c87858cfab615572762b728273d30538b31608818a456634b094801d6083855cdc6e335ae2a32b47ac90e86eb454bce12805dd17b9e9acbe8be1742293ccf2138dc45d506ade6fd2ed23e3f395842c84bf21c5fd8824717ec4e851672d542fec7268441a38b3bb62bbdd18a756cba7edc0a0838d9401c3fab3f6a464a845942738aff8a29766bce8bf23de49e2847f450de48518c27065439e7e8c6bf2110b3938db7c9dc1aa076c482d45d4d0668efc502c4125cc4fa65d734d080b1fe6f07a541042a087dc1e7580b5ce4a79f8aefe0c1cfb945c3591147720bdfdf7c2ceefdff81a9a24eb3c5f8c7b514e39708804f5ce28b43d2bd81c5f08357bb8b13bb0101beabdac7d546d623f043ecd5de090144c48d4e9ad8633b6ea4f8f4a116165c6d1b8bd3be285e3ff65d71af9fd290df3daed765f9265ce3464eec6165e848c90c3422fe6d1bcf6643f82cb5aa28cf240ef78920a73e4f98c5a18fada67bcb3dd63ea143e8019f15f7424d4be47a3068c9b7249f4fe33b0380bd2171dcbe752e9da8ef1594607cb83232ba77a24ad7108f83ff511d660e15acd91b2d8a3cb6b179145d1a1170ed6759636340beb34e636853f3d5fa6a9ec3473bfb5ae9abab4b9b21dd5a2ebee5098c33e8c26daecb3ede147fc90f4aff669c2350c419e213528e91de9d99f476036b3085a63dbbb576526b35cf9c02ca42d583ea6a441035daa82f8c1d206ce229a0d57850c679a5d4bfb3314f88a6b1e061935c849a2c981d4b9780a88e0fe8c90e4d87ef266cb76a4ba3f7ab0e160211e61826bc62aa618f3e63aa944b534a02b4b27581fbe6988e7dc069a45b75b2d54960bf02e4b2b546a98be23f45fe65a25fedd8ccedfa070cae6e4755aa4b4ca85df92855844a38075c0f654ed2046df41217a866bd9ad0f58c6f247da050592acf846be746c373a366548a9d480a94d043dc1263604278a8cdc8ecdf51396d3bfc6fd64893bd8a74f7ba077f01b0865ca4c1b158055877b553c3fb2d666e6a2473c28e7d1bb022562e583df634cdd6f19480b1790c1e42f1aae02df593fe3e6dfc21ffa6c6e14f333e1c37507002d75d1732d0e0c333e5389eba8c5117863426fa318766bfde1ef6d8d9cbaf01700ebd3d463afc1f8a0d59dcf4dd44019f576ad4ee1cf40c056aa6fbe556366ed41ed9d70b0bbdc4e2f9be61b9a77d51dd194a860c7df0a5b6f7aa4d299b3179925be6d59d5d94d0edb40a0b36da8d17a939d45748e289e2f45664183a31f57df87b42f5cf98b828151975a633655e652ee7a442fe790e5f0663dd39af5d91997fc69d22fc3a061005f7829aef8531db87a35a81d379c8ef3b705ed77f0cc4e0f04f548e49bbcab2d416542c1c5947624cc41709c6338e168a87156e32e99f8dd316ac672e4a30b7e2d0b1ea1db94b6c32d373cabfae3ba5b2cfbc05f7fa3f76816597d16f72be6a1554b79721e231bb0ed61e99028dba8c7e7f706a7c04ab100c9fc06ae2f3f5158b0ced0b58a2cafa00e69ae08e0a44ee22ec9bfbab9277488792c29b5a845abfc18bbd1231b4e2493916f46db1655fce0acd91edfdc6d7ea33f6ca1ffe5d346a4b8ba75d7e6923e82b82bd7a2211f7b178fb0f919bef589d00723811df3808f69a6ea2181fd5301b801a616b2c8c0b62899447d950c7a0b1bf319c66c88074f4f794e1ada343a9075c450ffde1ff2eb8c55ca10e8d2edb303139f3486a9067c2e6382ebd2ec4b7103d989d5da69f3004fadb7253816b2b5bc030d63ea23cf128e780037492b089ffe70dd620c31591043b96370674baf155f103275fed130e8e1e6b9d84f2d75b68e3bd51f7a7a8067bf48a5c61ae90f3f2416b8ad05a6a93130423c34465996b198a211392f9501fa537d12b45395ed788d0f27b1ba20716532124878c19a1266586e59ee49b015b4bfef4b9d9499224f510862e273ea22883a3336c4c6a4ede5e1e6ae0fba7651d0289326481192d7aa3e6e8bff3a52e3171cec2c8046eefe0e7f46b57163ed3341e51416a876e4634042a69e16c76da50fe5c4805f180ce198dcb09b798d4b9363bec91d20b38e4cd4b63331a9d5b86c00c7ccf67d7d90a36846a15814c2ae4836c295a5058ef1442af9b809e6cf66eb7552e6081a5b8efc05a337483c4b7b08c079cc4c9b2d22449f9b67430d26ac92596fbbe21269ba68689094b950ad9a6023a0e7d331c91c7b84bb8383b9ba3725ada9248b678caf5f330b668754113d8712d9a2982062df5274e20269831ed2a180275e9cb490e84bb0a6c44cd3ab9edacd922ed2a7f865917a7cb1ec6fe67497b6090a69bdbcb8b4d33db2f2f30b4e93e970323ade851156edafdeec5d3ff9c7a980f764dbd23d4277b8a81d94e0dfa0c546e5ace7396e628688ab6f6b1aa8983059a0e53ac4c409f6d1b1ec792d1c6a85bbbee35f3c858b85d749529b5f6092371b783ff50646ccce8ce10bd4cbf433848f77c50f3b721a736f6a237607423db1dcacb62603e2f2fc2b9fcebbaf8f1c140e97639d27", 0x1000}, {&(0x7f00000002c0)="f8bcfdb4c553ca5739c7e626d068b2ba64eb67222c18981f", 0x18}, {&(0x7f0000001340)="cbe4566d6c7b30c83ff9b3168e8722d2a51d148d7f5e44595d22ae38745b6049c47d3e641c3718c97277e150168adad9e14b6b7e50e4c06575b577e2e4398bcf03ff40feaac1d93a4aa4dc86bcb34b0622d56d1b1fb552d167e966db56feafd183a6cbf7d9e9f560f799b47fc42cac6780371cc2ee90c0171bf240f31b2792acb770c0b6cf87e059d7b55244d2d78e5e6e814bd4bbf5e19ab81b305c581fa43d7ad3e6145aff34945f6450a5a5b9f283a9042a6b6c6b86580c12b030bacb42c15087ddf00b3d18e14526ae", 0xcb}, {&(0x7f0000001440)="bcf70cfd398199ba25dc86643b8422c5f3552c0b672235a2c9b69629549e02d98ef67ca9086e76c894368a0058b6882057e89ab41c3d68ee96953cda99195feca5b6495c88bfb40dd4458aed41e9d8232c286197623e8637682b28c30e238b5b637aa5527a440753805515ed7fa1cae2d6", 0x71}, {&(0x7f00000014c0)="900a19b7", 0x4}, {&(0x7f0000001500)="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", 0x1000}], 0x7, &(0x7f0000002580)=ANY=[@ANYBLOB="1c000002000000a5ff2aa06048316500", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x38, 0xd321c66ec623d2e9}, 0x7d346b6eecaf8b8a) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x9}}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000300)={0x0, 0x7a}) [ 189.729850] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 189.729850] program syz-executor.2 not setting count and/or reply_len properly [ 189.837383] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:17:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000004c0)={0x3, @default, r6}) ioctl(r0, 0x80000001, &(0x7f0000000700)="df4f86274593ccc66f70a8578fc30e9b2eb73057094ce9") 17:17:55 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xb, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x4000201f}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") close(r2) 17:17:55 executing program 1: clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x10000000020) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000500)={'veth0_to_bridge\x00', {0x2, 0x4e23, @local}}) inotify_init1(0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10001) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x4053a, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)=0x4) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x1}}, 0x3) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 17:17:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x9, 0xd6aeb9b92f94638f, 0x30, &(0x7f0000ffc000/0x4000)=nil, 0x5}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000140)=[@in={0x2, 0x0, @rand_addr=0x64}, @in6={0xa, 0x4e23, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x1}]}, &(0x7f00000000c0)=0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@ipv4={[], [], @dev}, @initdev={0xfe, 0x88, [], 0x1}, @dev={0xfe, 0x80, [], 0x10}, 0x20ffff, 0xa157, 0x7ff, 0x0, 0x2, 0x108}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) write$capi20(r0, &(0x7f0000000280)={0x10, 0x100, 0x0, 0x82}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x1) gettid() [ 190.232134] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 190.232134] program syz-executor.2 not setting count and/or reply_len properly 17:17:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000000c0)=0x7, 0x4) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "bb910e95f149accba61115742f49e87c784af6ae34e95fdee622e0a0682acc27859e2bc91136e7303eb8b1080194fdd6eb59c5f533c4b4599015a5a08dc2d8a8ec4cde30267600684aaab88c698df326fdf05a919b3f86685fa91a31d3a05be197a3ab5a046edc37f09b0501b8bacd76753602e5f838aa4a0db1c5f9f5f0694ea67caba09c5e4394da5717cb0464cf5c26d7a1cd422b73e0c30e90c273013297f027fbfc0438285fc5f4134d452f3e65693dc7456c49a63e3dbc6db52db614cb4a4c696961e7c652d734f6458ae026e453bab1f9dc7d7b23dbef3a78b5c5c1c49bae8f8d3f8d700131e8b1d54e8f33f35cb7af658a0b9913"}, 0xfc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 190.332853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:17:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x101) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r4 = geteuid() setresuid(r1, r2, r4) 17:17:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') fstatfs(r0, &(0x7f0000000180)=""/110) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0xffffff6c, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=r0], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x0, 0x25a, 0x7, 0xffff, 0x5}) 17:17:56 executing program 3: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x7, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="000126bd7000fedbdf250a00000034000900080001007f00000008000200ffff000008000200ff0100000800020002000000080001009505000008000100060000004c00010004000200180001006574683a766574683098625f735337bfd35f746f5f7465616d0000002c00fb001400010002004e22ac1414bb0000000000000000140006000200540187a885674e210000a00c748d1bc1158961015dd22475c020cac6ad72c1e3c9feecf6bde085d9356775fc7a4e07be5c6be4e9633fa0747e270ffeab63fec1dd2cb99d5348c50b1230c719f0959acde8"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:17:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 190.669490] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 17:17:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @empty}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0xffffffff, 0x9}, 0xc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000600)='/dev/snd/pcmC#D#p\x00', 0x2, 0x402000) fallocate(r0, 0x4, 0x100000001, 0x7ad) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2080010}, 0xfffffe8b, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000040) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 17:17:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, '\x82ng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 17:17:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000004c0)={0x3, @default, r6}) ioctl(r0, 0x80000001, &(0x7f0000000700)="df4f86274593ccc66f70a8578fc30e9b2eb73057094ce9") 17:17:56 executing program 5: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) write$FUSE_DIRENT(r3, &(0x7f00000002c0)={0xc0, 0x0, 0x2, [{0x5, 0x3, 0x1, 0x5, '.'}, {0x3, 0x3f, 0x5, 0xff, 'eth1{'}, {0x5, 0x200, 0x5, 0x3ff, '^eth0'}, {0x3, 0x7ff, 0x4, 0x6, '[:-+'}, {0x0, 0xe6, 0x13, 0x1, '&!-posix_acl_access'}]}, 0xc0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x2b1, 0x0) 17:17:56 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget$private(0x0, 0x200) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)=""/167) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20900, 0x0) recvfrom$rose(r2, &(0x7f0000000040)=""/65, 0x41, 0x60, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000001c0)) [ 191.332334] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 191.332334] program syz-executor.2 not setting count and/or reply_len properly 17:17:57 executing program 4: r0 = getpid() socket$pppoe(0x18, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x9, {0x0, 0x7}}, 0xe) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xa09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmmsg$inet6(r2, &(0x7f0000004680)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1, 0x401}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="47199bab588d8927e219537a272594f19f03f4c2cc438436248ab34699afcee3b26e637947a87cbe297672ab4e16a307d0caf7a2", 0x34}, {&(0x7f0000000300)="ad9ce34c7bba032895408b5acdd0ca45f478200593057abdf870219e3c746a2c3f39d35bff82fd17662cc28b95d0e5a0965e94b2e142974ddb03ff03d3855584be05b1873035073fcf568da12c3923aa693e606c1ea3facdd99812e8f6fd670a1b7a245645325a3a503d9dc9c002611fe3ef17e774d5808fcb175e903bdc402b6558dba0f924f46a4a7d6ef05841ae05632fe709d59e705b9c413963cf39af669ab161ca6c19ad70ccdf18c7e810583b92d26e", 0xb3}], 0x2, &(0x7f00000004c0)=[@hopopts={{0xa8, 0x29, 0x36, {0x2f, 0x11, [], [@generic={0x7, 0x4d, "a22c1ab204afc3a4882a193efc519bb476f4e7e61dacf60011557f50481a35770b9d27f3cca50714333daa49bcce2cd3be9da57896f0c352d78d456e2e1be9f288a9937f545bb8d9cc8b9f54fd"}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x401}, @jumbo, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @rand_addr="8b2b2f9a671d99cb6f9a85eb5cc1805d"}]}}}, @hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @multicast2}, r6}}}, @hopopts={{0x48, 0x29, 0x36, {0x0, 0x6, [], [@enc_lim={0x4, 0x1, 0x80000001}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0xfffffffffffffff8, 0x8, 0xffffffffffffffff, 0x5, [0xb3af38d, 0x8, 0xfffffffffffffffa, 0x8]}}]}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="4caa3d47e73c89600758ce8ca9d5f4e92160ad14417bf6feffff312ebc920a08", 0x20}, {&(0x7f0000000640)="aec52ecde2baafb4a67f9c2dd2c0275aa05b571b41ae6cb8d576bbc96d6049929fd94b381dbf68b91a0cbe80a064fdff678f81a9068b78a110cffd044b845811e8944668e2f95eded225ca9b018ee7e17c167448db58d58d71aa2e9f99ab26246da1285f646ca5be576fb4d08ca74d11084953ce0e2fe4d6ddd46d70a6bab463e737608058b4d8a636cf54a9679e0c6664c40315557cee1d535cdb7c43471a7202451f3145468ea08bb7f298c7b51747ea7fd079490a6c95e0af9331afdb91cd5db7ea114983e2382915fe00af1ab4cd7df1df3189b459", 0xd7}, {&(0x7f0000000740)="177737b339b7eceb69cadfa27b7dc1ab01397d45a3f070a2218dc6fdd018d0eec8b8e40009d48394d0470d5c903a0d6fe7f762e45f67fba330794a51ab07f55484005cb9cafcf911b6f35d7b123cf184dc567bce2bb5ac4d4a1718368751c9734750530febcd792ba5cfd4e8290040be200d0c9927852b9a99f62b878189f710221c36b604dcc96234203edc692b0dc1f349d510b6c34b616ecd66799fe269a02c83fd5f66eab780df44916106711b4c03885a98425ef7668cbc38318064468acd601cf9b51e9678594250", 0xcb}], 0x3, &(0x7f0000000880)=[@tclass={{0x14, 0x29, 0x43, 0x787e1559}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr={{0x58, 0x29, 0x39, {0x29, 0x8, 0x1, 0x9, 0x0, [@remote, @mcast1, @local, @mcast2]}}}], 0x88}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0x100000000, @empty, 0x2}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000980)="d1c6d937eb", 0x5}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="b0041925c08eba44b9c9431a39e3f5c5ac24a983c06a", 0x16}, {&(0x7f0000000a40)="9b0b6a3f0f97d01c2971b8da53", 0xd}], 0x4}}, {{&(0x7f0000000ac0)={0xa, 0x4e23, 0x80000000, @empty, 0x6}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000b00)="bb98", 0x2}, {&(0x7f0000000b40)="86e43f56330f87fda2260c729de8d7aa1f700414fa9e683072b3bcff0ff422a3cfd31a58bcd3c828cc7970d54a59687cb1da3b2708943df4dc5d11a537207e76cfaa943ea1c8", 0x46}, {&(0x7f0000000bc0)="1ea3569c96998b8dcf32baee2821cce7fa5ecd7a382ae6cf0902174119514f0cb3a92bf33ece6eb5970f52891126cfef03db31350bc1349a25c406b5f16bac197511fb382fd06ef38700282984f6abb77fa42dfb20a3eac1de7d7e6cf203d29127cc5be9eb579787cbf4716f2ed04858ce012939ad135b4eb4f68b48d0dbd886a788b249395605d449e4448036b300990d0c97a479fd0a75da5bee4b9e9cefea289d79e05bca23d707", 0xa9}], 0x3, &(0x7f0000000cc0)=[@rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x1, 0x1000, 0x0, [@mcast2, @ipv4={[], [], @rand_addr=0x8}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}]}}}], 0x48}}, {{&(0x7f0000000d40)={0xa, 0x4e22, 0x1, @local, 0x6}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000d80)="0e27c7a3ca2a0d2ce06c787bd2b3ce5de2317c8d9499aea7590bb7ee13dcf1e1e786c37e1e052ed4d44fa4e6aeb2c21420fc2e367874dcd3c8d8f91f08fecff90943d562265de83338d5c68c34faf537200762ac2d5c85f4e0a494692bff11", 0x5f}, {&(0x7f0000000e00)="c8a83a41bdcf385c5da6fd36e7936a69c95508f30a1d695caddb65344bc85099cb707a5d6bd486c3c275a890c9082f3afc3c8fec410dec98a292ef6392e3bfb9575b3e2ac5143e902353c13846a504b56aa045e593bebfd96c7f0cf8b11672e18178750f575edb28501f2fbc7012a78450476c12632f4e76a641b756374476d122b4ca069b3a0cc61466906f7da3caa51a3a183ecaef6abfffd529e464b68b943f41d3ef1c4da5faf86d3361a100b0c278e0f4ef2a3876e7ca4dd20331bcb05534ca64628fb162f2f5103499c031371a96", 0xd1}, {&(0x7f0000000f00)="2c3a4771387b91cd22c6281b9b9666eb2898d3d8cc1bc2d8d2e951c6169d8bf3d75809832f2e09e6d5315e299ca0a00aba979a18c413dffbaaa642f39a5208e3606126d5f3f6328a051a4d5991eb22efee69eae495d8c1343e4edf92b21cbf871015ff790191e45e28d95bb94b220b7ef01c3f21a363c7898956ea74aac208589fd61077bff3c2b5c046ce2e3a604cfc6438ebbbf9106acdd72e94dfd4844a073723bac414a8b7b787658316b2208fc4e165598824ba9c050a2ecfbea2fe8d51ae", 0xc1}], 0x3, &(0x7f0000001040)}}, {{&(0x7f0000001080)={0xa, 0x4e23, 0x401, @ipv4={[], [], @local}, 0x4}, 0x1c, &(0x7f0000001340)=[{&(0x7f00000010c0)="bac78656c2910a694c2a1675c9a95ec8f8e1b2cd5aacde8e", 0x18}, {&(0x7f0000001100)="e1ae4fee693ca009f3a9491d9b2231394fdf50be0642b75c31ae1939bdac9b2bdff2e39867b1d866b7084ac238e110196ae1c8981fb7c581fe02e2d743b762dab630394fb114a25106d8efd0dc912d0671b85837b834b0cabba1a9f49f26167c8f0a60ffc3b742e4039dd6902e4891b5f4d97aa8bb49ebc505368cda9549e0be65797f9173d0c0d38acf63d88ddb28b31ce404c628d7336d1dbc29aa482ab098844254571ace9499965f45b59627c8604f4fe1b6dbbde77d3abc3980bfb69f7f53410cd0d2cdfdfb1a131d2ee9cae7", 0xcf}, {&(0x7f0000001200)="285366ecb410a9c1a4b20abd1752ec21b3cf6f0bb0f38e45f590b431a0254ea9eb891cf3e218a6857f011c11d07a5de1dc0c8e166f88f485b0e32304dfa483acb5ea297502b56f8319c6c165c84c74671d1bae7102b6315a927def4840db6cb2e200e50dacd1d4eb6aecc2e8a389f95ed0f3d0969f8fcfd0061394f30d97a41a92c900140697623b72b00214acc351ed79857100a6e9464d6fccbbc842b212f6f68898968f0effc676a97a800ea8537fcc5101c5cc1af40f1c620bf3727c5e068439280de884e76aca0d7fd0cec20625c864274ead266450472fc496844283a732", 0xe1}, {&(0x7f0000001300)="b329715894", 0x5}], 0x4, &(0x7f0000001380)=[@tclass={{0x14, 0x29, 0x43, 0x10000}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x3, 0x2, 0x0, [@loopback, @mcast1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0xf87837e900ae6268, 0x8, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, [], 0x22}, @rand_addr="c6aa03f913ccbf491175a999b022add7", @ipv4={[], [], @multicast1}, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001440)="9342918bbb11f2c282a211fd630f16cb0220dbe8d228a9b1a51ab01969f235803bb311f9513d941f74b79e70fabaac93029466f5d338edff1952a3bd99ecb2496de97baf942115c3ef46f309fb05a11dfa41ab580dd3334efba2a2ac80c7295dd79760862c7856f321a5f68e5e3a70fd47174a88ae8a8a9978891c17ec09c646ca1cd7e65f196ece28ad9855354dcb5fef5dd63aa79facd6407b5f5c8099", 0x9e}, {&(0x7f0000001500)="c80d44e656db12144de3a6f5fb03e9b6c748e9c2cb952bae54f6b7923cb7a03c1f9bf8b0ab3ad9d56520f033cdade47a70c2ba2a82ae875c75ede8629f5de481302e16bf8fa9716f94088f38e79bf45d0948aea9f487a961c48b508cdf9455f2b3faddfcbe06207bc3", 0x69}, {&(0x7f0000001580)="8b6fe4b9a760c07586f818dc64ca64644fc32775c3c58ef28f40fb9dc6ce7f8875a3280f80a9a2ae83deba6d1da2278ded9cc43a87146812e509675dfa2eb04bb05c3b3df3995fd29801b9469bfbde327107568d7e5a7219739b80c263c0bd5bf2c9df8f322ade7575b83260d487f6746ce642d23281374b", 0x78}, {&(0x7f0000001600)="93d6590fe883a855169b22eb7b532705724240", 0x13}, {&(0x7f0000001640)="5463c12acf863cbc4c6f282ef5e4ce8140c160b637d900af988d250a446c3e8c8b12e97c3df16342d93d7e2e2048b95708d2954b3cfe04a41db737dbe95a1941b632cbe43ad039fa51", 0x49}, {&(0x7f00000016c0)="3d5110b04c8448d1785dda5514ecf517c64b513d9ac566b69ecbb21fae0226709a7e1c67157e6510ce5b37172ef2c1da83a3aa897a10439b4408454ac58a01fe9e918fdbb3372be1392a87cb7b92afd6e5e686e33b4e2c08937561f794536307cec5d465a5938597c41bcfb30d8b0249a1eb22344ff07ece7e5571c55b845b5899", 0x81}, {&(0x7f0000001780)="3c097769662d9ac324419b727c2ab090730493a02c7c1b0a942ce9fe4581b02000e8d63828556f399747663693f2fc9bcc153f924bb70c9016164b664c3c66f7674ea46d83dc59700a", 0x49}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="9e2c1998a03d629ee2c4c541a6c24a78ec87086eacf2b488230b6721b1f9", 0x1e}, {&(0x7f0000002840)="2c8b722862d1a7f0ab7070e5c27470f78f85931bded7d1d7c0a7f9f79245c98c8882b08921a7cf8ddf3f86042edfb6269ea748564a8926c2a57e442d58ccd9e6885cf00245892c1b5b47ee257aeb33ea4dfafe725b94a50898cff841456d2d9256e1c2cb3c70c822541b67e62eaf15d393803f5d163211efa68620ab53242ba534ecc12dc0f8558cf09de9b0682ce52488846f437e8ec535e1f5b55c7d3f3285c07170af91e1c6fb9c626b4f1f3a", 0xae}], 0xa, &(0x7f00000029c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x101}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x11, 0x4, 0x2, 0x9, 0x0, [@rand_addr="2218fe42156563439a71ff400defc02c", @ipv4={[], [], @loopback}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xfd, 0x6, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x100}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x1, 0x1, 0x0, [@empty]}}}, @hoplimit_2292={{0x14}}, @rthdr={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, @mcast2, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @empty, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xc, 0x6, 0x0, 0x6d2, 0x0, [@dev={0xfe, 0x80, [], 0x13}, @mcast2, @mcast2]}}}], 0x1e8}}, {{&(0x7f0000002bc0)={0xa, 0x4e21, 0x5, @remote}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000002c00)="43c78c4747bfa47320c4343d55a57235ce3fd2a09204ec1467bb485ce91ac1e1cb9ae9e8acfc82e0866c67c1f0823f80f4ca165c28898c10bfd6ebb51edfccbf1821b796a25f19ec1f4314340937db", 0x4f}, {&(0x7f0000002c80)="c684e09121391cd56e27b7f56068bad3740a61457b7c1f965a7d1e1e928e3fb6231142260379070f487b4b7d453c", 0x2e}, {&(0x7f0000002cc0)="10cab87a07cfd362a33454f2aff958665941d91aa70c88ed3b96b9a38d85cbe9b115d6cc9e658f372891d0659be42afb494e1e92462411646892aa1e70b84f8224b86185bb5493d9a69888e01e41077db7b5483a503c34fdf5a62e869cddc639125c0d256872d296d8be2038ad0d12ea809195bc43ae4286", 0x78}, {&(0x7f0000002d40)="0c56e3a5d02216af", 0x8}, {&(0x7f0000002d80)="72199fa3194ac911e845d074a08c7e5aa821243f9a2e9e512a87c0c50cef20feb4b647ce44af67e96469e129f26ab073dc4e2a8c2df208a348e57d435738a2e35257", 0x42}, {&(0x7f0000002e00)="12ddaebea7d842f5834591542fd561ca2f301d90cbb03549be065da559de6b3584269d9bc82a67de84ae01df07ca2cb0005889db", 0x34}, {&(0x7f0000002e40)="6260928e3d1d73d06c501868c1a757f7741afd169bfce4dcd0ac3ece1c70659c573f7deaa7faec7ca3a864bab05984878870fe2b0f2d06b8b54be9d727415ef62d9b99a70d834893f7f460ed67d16f314a71bd584dd57beb743f18779186dba0", 0x60}], 0x7, &(0x7f0000002f40)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x37, 0x3, [], [@calipso={0x7, 0x18, {0x20, 0x4, 0x3, 0x3, [0x1ff, 0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x50}}, {{&(0x7f0000002fc0)={0xa, 0x4e23, 0x4, @remote, 0x40}, 0x1c, &(0x7f0000004100)=[{&(0x7f0000003000)="874967f3a1d271be8633304457f7a7aa7a01aa70fd6d59a31324b5d21434901283b8993f5a67249f730d143ba026ecb68355a43b", 0x34}, {&(0x7f0000003040)="e669a409c591847bd3fffe70ef315eb5215e26c2a60142f92c1750c086837526eabf0b1a69a0f84c6c31f423a0374117ed72206879f33b539d2b683a205849b710603a402acf051cb7614c6d95a051f7be905b5259ceb1e2dd0b62372fbbbac903048f95868d4b244a438a9ffa388484faa7a2a8ef89cfc5d934ef3a65789b27ac514090bbf00ad0de243970deebc8b5baf275ae6025ca", 0x97}, {&(0x7f0000003100)="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", 0x1000}], 0x3, &(0x7f0000004140)=[@rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x3, 0x1, 0x0, [@local, @rand_addr="b76ba94369e7380177bf4039d8c41ca2"]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x1, [], [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x73, 0x6, 0x0, 0x36195991, 0x0, [@rand_addr="05329d61aed5e3f809b6a7859d06a34f", @empty, @dev={0xfe, 0x80, [], 0x24}]}}}], 0xa0}}, {{&(0x7f0000004200)={0xa, 0x4e20, 0x4, @loopback, 0x3c1d6ca0}, 0x1c, &(0x7f00000043c0)=[{&(0x7f0000004240)="02c36d04f3e349ccbaa164e201cc823a4d449890b32617b0e08f656aa569c8c9902102fe31ee3df5ed30637431b15322b2f9cb9478d05e125f88fb2a69207ba0336bd2f71ca9a9f36e136226355799bf7b5e8e4971db675dc7b611282b2891b2b988e8cf031804", 0x67}, {&(0x7f00000042c0)="f986601f4c0b3587e3369fc07660eafd126f77cc", 0x14}, {&(0x7f0000004300)="013740d9600b6f81027d21c07956475429329de93aa4fc80c952a63a1a0793a44c7ab696adec91955515b54264e8ea0cdfb925f816628d6a9b3208037b1dd192196ce2116808553bfd4274ae56469a6fbbb7fa0022cfc2b10c99d4f9fd30784ad88065cb2382b14baf72767a03521386f19e80ce9be6b641f348e71256c00ceb396ad64c41c37b6652944a3ccfc2b690", 0x90}], 0x3, &(0x7f0000004400)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x2, 0x5, 0x0, [@rand_addr="51cef9797e96fe664c4a8f274cd796bd", @mcast2, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @remote, @remote, @mcast2, @dev={0xfe, 0x80, [], 0x17}]}}}, @rthdrdstopts={{0xd0, 0x29, 0x37, {0x84, 0x16, [], [@generic={0x7, 0xb4, "b971caab18c21c46c602b8554edc9aca79f06d79788b3c8580a0a774d1aee1305b509429799b95d107635dc37e5d2965bec828f160ba81d863f15ffc3e5028fa19f885cd91fb2fe4dddc35041468db996d528f9953fe2e1619ac69c09f6e2daa552954f907fb7dba76438a08bcced6fabc92ab4dd062d2398861c46f6af7fa956795d33c2625506427f3f14ad8dd268951daed5a8f1959ae7c7a1153c0ca639d713e04871288d22d3437dd6ea9c821486e397ad1"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x100000000}}, @tclass={{0x14, 0x29, 0x43, 0x4800000000000000}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x3c, 0x11, [], [@generic={0x5, 0x8b, "8ea0dbd24c3749fffae08d1038fcbd20f0cd94e9001b14ca83c03fe9279c82c1634a9d012824d320a60ac1a0f1e0c3d7edb6edee80f06d2242e62e7ccc6a5259118368860e9092da584c0d88086fde9ddcecbceed8a352a13f6527b18e6eaf1c24a405b64ca897c895757ad30fb1363b5487efd972236cbe8a88c1046176bf3bdeba2657769095bdede46b"}]}}}], 0x280}}], 0xa, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 17:17:57 executing program 3: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x7, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="000126bd7000fedbdf250a00000034000900080001007f00000008000200ffff000008000200ff0100000800020002000000080001009505000008000100060000004c00010004000200180001006574683a766574683098625f735337bfd35f746f5f7465616d0000002c00fb001400010002004e22ac1414bb0000000000000000140006000200540187a885674e210000a00c748d1bc1158961015dd22475c020cac6ad72c1e3c9feecf6bde085d9356775fc7a4e07be5c6be4e9633fa0747e270ffeab63fec1dd2cb99d5348c50b1230c719f0959acde8"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:17:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x175) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) [ 191.770474] protocol 88fb is buggy, dev hsr_slave_0 [ 191.775751] protocol 88fb is buggy, dev hsr_slave_1 17:17:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x2) [ 191.874316] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 192.000466] protocol 88fb is buggy, dev hsr_slave_0 [ 192.006300] protocol 88fb is buggy, dev hsr_slave_1 17:17:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x175) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 17:17:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x6}}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x4200, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000380)={0x6, 0x1, @stop_pts=0x4}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{0x200, 0x3ff}, {0x5, 0x1c0}, 0x7, 0x3, 0x9}) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x5, 0x4) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 17:17:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000004c0)={0x3, @default, r6}) ioctl(r0, 0x80000001, &(0x7f0000000700)="df4f86274593ccc66f70a8578fc30e9b2eb73057094ce9") [ 192.187249] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 192.187249] program syz-executor.2 not setting count and/or reply_len properly 17:17:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x3c) r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x800) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x3) [ 192.366917] audit: type=1400 audit(1565630277.962:49): avc: denied { map_create } for pid=8352 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 17:17:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x6}}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x4200, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000380)={0x6, 0x1, @stop_pts=0x4}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{0x200, 0x3ff}, {0x5, 0x1c0}, 0x7, 0x3, 0x9}) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x5, 0x4) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 17:17:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mlockall(0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0xffff) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 17:17:58 executing program 3: write$selinux_access(0xffffffffffffffff, 0x0, 0x0) 17:17:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x5, 0x249e1e, 0x8000000002, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3f) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000000000007, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x3, 0x1, 0xff, 0xffffffffffffffe1, 0x6, 0x2e, 0xffffffffffffffff, 0x4, 0x2, 0xffff, 0x3f}, 0xb) write$sndseq(r1, &(0x7f0000000140)=[{0x1ff, 0x3, 0xfffffffffffffffa, 0x3, @time={r2, r3+10000000}, {0x1, 0x2}, {0x393, 0x6}, @raw8={"632c4bf80e40205d81b419ee"}}, {0x3, 0x7, 0x0, 0x4, @tick, {0x9, 0xffffffffffff8000}, {0x2, 0x7fff}, @quote={{0x6}, 0x100000001, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1f, @tick, {0x0, 0x6}, {0x8, 0x4}, @addr={0x6, 0x1}}}}, {0x80000000, 0xd1, 0x0, 0xffffffff, @tick=0x8000, {0x2, 0x9}, {0xac, 0x10001}, @control={0x5, 0x1, 0x4}}, {0x10001, 0x1000, 0x1ff, 0x9, @time={0x77359400}, {0x2, 0x100000001}, {0x6, 0xcc}, @raw8={"612a23b3c323b9c7bfddad40"}}, {0xc6c, 0x1, 0x7, 0x9, @tick=0x8c, {0x1b0, 0x8}, {0x80000001, 0x4}, @ext={0x16, &(0x7f0000000100)="527c6ee884eb816cba162f22e48b79bee27e45678d63"}}, {0x0, 0xfffffffffffff047, 0x9, 0x5, @tick=0x3, {0x20, 0x8}, {0x0, 0x40}, @connect={{0x2, 0x3ff}, {0xfff, 0x5}}}, {0x4, 0x8, 0x7, 0x7, @time={0x77359400}, {0x81, 0x6}, {0x2, 0x1f}, @result={0x1}}, {0x8, 0x3ff, 0xff, 0x49, @tick=0x67d0, {0x8, 0xc6}, {0x1, 0x5}, @note={0x8af, 0x4, 0x9, 0xffffffffffffffe0}}], 0x180) 17:17:58 executing program 4: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xfe93, &(0x7f00000004c0)={@local, @broadcast, [{[{0x9100, 0x100, 0x8, 0x1}], {0x8100, 0x7, 0x1f, 0x9}}], {@mpls_mc={0x8848, {[{0x7, 0x0, 0x6}, {0x7ff, 0x0, 0x7}, {0x7, 0x0, 0x2}, {0x5, 0x0, 0x7}, {0x200000000000, 0x0, 0x3}, {0x10000, 0x0, 0x8}], @ipv6={0x2, 0x6, "b169d8", 0xab, 0x2f, 0xff, @ipv4={[], [], @remote}, @empty, {[@srh={0x2c, 0xe, 0x4, 0x7, 0x1, 0x60, 0x1, [@dev={0xfe, 0x80, [], 0x12}, @empty, @empty, @empty, @mcast1, @rand_addr="25e87459609e2c2169e91da2e51cd499", @empty]}], @tipc=@payload_mcast={{{{{{0x33, 0x0, 0x2, 0x4, 0xffff, 0xb, 0x0, 0x2, 0x889, 0x0, 0x1, 0x800, 0x4, 0x1, 0x4, 0x145a000000000000, 0x1, 0x4e22, 0x4e22}, 0x1}, 0x4, 0x1}, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x80000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000040)={0x0, 0x1, 0x0, [{0x3ff, 0x6, 0x401, 0xff, 0x4, 0x8, 0x2}]}) 17:17:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000640)={0x9, 0x9, 0x400, 0x7fffffff0, 0x200, 0x80000001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000540)) pwritev(r3, &(0x7f0000000580)=[{&(0x7f0000000100)="b6e2cd0e4dd3c31c0f65b43b2cddaede2c0d7228b6772f303343cd3455e899115ba620eb174e042d3be702d8f938696a94a2f09cb6a99884f809e7c689e06968b9475af179d0a1cdd82d032426299b5375aa92e8cd340ad3cad2078fcade723796b4cb57e504ed1291192b9821244269e49b6cdec6f4757566907668fb247031d820d2c23f54272ec42f40789820e5ca2f1596499ae4977439adfcd592654402afef19312959f021a47d105db1572e0f355ebe7b6fa69f854c2943d8d9c3987b2ae596b89096e221d80b9b679f8720581e0864e1520c92dcecbb6c3a3be03ee7205a6c0c26389b28c500995dac30e8ab43aeb1f378", 0xf5}, {&(0x7f0000000200)="64696adc57f5dbe858258fffc17fcaaa9b55cc63454cac9a54bfd7d79efbcdd1fa8b03965fbf88402dd69b182fc3bfba2523285290cd3713f9b23c273ae43d52b8975dcc1364614f1da143bff60c8aa7a0b3f2fb792e0401f7a78fbccf67dd22ab49f5b4026faa6c1e48d19e04823bd2a271bb9d502f07406f0b22619e639218da9aefc2a9a4f7feae75fbc35838e4a82a30f927eb42f0226ee067d2bc75", 0x9e}, {&(0x7f00000002c0)="5c912beeb4be85c1f1c6b7ec75e98dd82547073464d7f60b100d5dbbf1f1528017d1481d857c4ded7cbc70ea2adb2bad10fc868450a0e835763a860d921d8aa63f16654c0d699ffbeac52693b9c8e26874d0232f57933e7ac9864f6e2a2d5421105c471a0e47b081e4ba25819330a427c66bc8ae7b6b9b0823ec3c72836293a9884c8a43cb26e102cabb5125a6ba293cde7567d6ff3407683cd5467c2d859ce6dec17c9b56d84a44c1cb2cbdd4b12500a2e25d1ece0f8d6175b730d3feea01cc85bcc0fdbe23bbe4c5b6dd909283ec8860842191b14dd6799170871633b26f166fa61186ea4062e690f73ab0", 0xec}, {&(0x7f00000003c0)="ffdd73e9fa120e8ba19f11b16df0bddcb211f6830755aba969c8d1e1a25d4201c5ef81b7548907343054da94ebf648b45fe0b512e5a79b6daad668f261a903836cabb0f26c5fee60e85a5a8364609f42bc2479f8abf581790808397adb34c0e2b9e7b8ae8531d899b491335f0b2a2d018f65496388745a422e93fbb0a85f4bd1d2316e0e9e491d7d0f3f5f29cc21197cce6b9e458b47f795819edb7dd355a53b9f44efeb11642345ea67ac0e5eb883a6e5a919b14715e65562d548fc7f17564a9c803c6dac84021cf8f5b4449b", 0xcd}, {&(0x7f0000000080)="8f6a7f3953f9b668b3f07479b09da8865798e8020ca9", 0x16}, {&(0x7f00000004c0)="bb9d55d85d647d788bf7e4e11af27aad14a99f4bd5edd8933ec137dfbdfd3a1423b8311fedf54a645da9864d5b612c2ce45e07bdf8975d90a40d70b10c56a250f885a1487f80ed4abaa38427fef6267d01f2de1627c8ea251b7d0541ece70b79cd380656f3c1de1d5c6e5997635e9cd6e31db2bc4809c973b64b", 0x7a}, {&(0x7f0000000540)}], 0x7, 0x0) 17:17:58 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x8, 0x3, 0x3}}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000480)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000180)={0x1ff, 0x800, 0xffffffffffffa052}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x20) 17:17:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000004c0)={0x3, @default, r6}) 17:17:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000001, 0x503602) sendmsg$alg(r1, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d)}], 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 193.198761] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 193.198761] program syz-executor.2 not setting count and/or reply_len properly 17:17:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0xffffffffffffff9b) [ 193.397794] kvm: emulating exchange as write 17:17:59 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400002, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 17:17:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname(r1, &(0x7f0000000280)=@nl, &(0x7f00000001c0)=0x80) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="88", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={r2, 0x4c, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0xdeb0, @dev={0xfe, 0x80, [], 0x28}, 0x7fff}]}, &(0x7f0000000480)=0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b31c84109bf57df5", "97635f7ca2f6fd96b23a447e1167eb739636af8a9149dd39c53aca7291e180e8", "9fa47a53", "5e19caf33da7455c"}, 0x38) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10) 17:17:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) ioctl$TCSBRK(r2, 0x5409, 0x400) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @empty}, 0xc) fstatfs(r0, &(0x7f0000000240)=""/92) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r4 = gettid() openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/validatetrans\x00', 0x1, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/mcfilter\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 193.597098] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:18:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) mlockall(0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0xffff) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 17:18:00 executing program 3: keyctl$set_reqkey_keyring(0x10, 0x3091ab88c00648a2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 17:18:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001210}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0xdf3d8e6944154d91}, 0x4) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="7d0000001200192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f640094750a0e2900050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000", 0x1e7}], 0x1) 17:18:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="407a7e36ddb26d93cdf5dfee7bf0460000000000"], 0x14}}, 0x0) 17:18:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) ioctl$TCSBRK(r2, 0x5409, 0x400) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @empty}, 0xc) fstatfs(r0, &(0x7f0000000240)=""/92) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r4 = gettid() openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/validatetrans\x00', 0x1, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/mcfilter\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 17:18:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) 17:18:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001340)='/proc/capi/capi20\x00', 0xeaba8ffac5167d1a, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000001380)={0x62, "b3842b9c87944d3fe90bc30645c7373223b4348f4ced147fc3bb658c9beb1a16833cde84e9cdd64eb2e83eb9e46c27a9c8d3b6597fadc7a5f96deb0ff0bfdd77392077f9521950c6ee79e3d0bcf928c0f1163980bcc47c9d4928650305457d2c9e020155cd50f1cbcbb9afe18fe7114390544aeea4722faf52bcf2d312655995"}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x4, &(0x7f00000012c0)=[{&(0x7f0000000140)="abe1276ba0ea352656427f674457e21bf2a80b", 0x13, 0xffff}, {&(0x7f0000000180)="1e1eada8333a5a37c0e47b82fd4ce5a0cbf05889027f193aa036a741a5210bd89b41da9f7567690a30eea0bd29e35752c8943089d9e3de8ab0c10b355d2b9b88d8969d312951804a337d6a48bdb6435b60e35fca", 0x54, 0x3f}, {&(0x7f0000000200)="33c9615e745133fb569ac4e1be7377dbd8c7b777c692c9b74419162e86012ccbf78272c202daf039b1d2351f983440fa0b73af7307cd91d43318989f5726052797b93052df4b8777e76491d9fc1feb8122835e804dd136f3d8bc8983435f2e4856f50fefdd2565f1f995ae5e7819287b87a4ca62c78c000d3c787a9c569f6e6bc96df5d908ab0595bcc751ac19681abca307a97351368c46a1c93dd9e4337d51d0f792e12975b818449995ebe698842acc449183d42465aa77240a", 0xbb, 0x80000001}, {&(0x7f00000002c0)="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", 0x1000, 0x1000}], 0x8605df6e42ddc8a3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000001440)={0x9, "176b55e193fcebee8dbc6ce976e4f98bd29f045ef85d641d7728b06a7c5d7bb2", 0x1, 0x5c5, 0xfffffffffffffffa, 0x400, 0x4}) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") [ 194.799320] audit: type=1400 audit(1565630280.392:50): avc: denied { write } for pid=8422 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 194.860441] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 194.860441] program syz-executor.2 not setting count and/or reply_len properly [ 194.866803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=8431 comm=syz-executor.0 17:18:00 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r1, 0x800}}, 0xfffffffffffffcfb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef12dd8771628bed4df70c1950be2d90a40d9e2fb023b0ef537305af4e444bd4ac39c5bf", 0x5d, 0x400}], 0x0, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x391000) 17:18:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) ioctl$TCSBRK(r2, 0x5409, 0x400) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @empty}, 0xc) fstatfs(r0, &(0x7f0000000240)=""/92) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r4 = gettid() openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/validatetrans\x00', 0x1, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/mcfilter\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 195.083850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=8447 comm=syz-executor.0 [ 195.099165] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem 17:18:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x6) flistxattr(r0, &(0x7f0000000100)=""/94, 0x5e) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="200000001a00010000000066835f7f081ca20e00000000000001000001001e00", 0x20) [ 195.155736] EXT4-fs (loop3): unsupported inode size: 44244 [ 195.239327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:18:01 executing program 0: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa8, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x12}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4c800) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xffffffffffff8cfe, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280000000000069078ac14ffaae000000100004e20", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="22d7043a5d57f6ff"], 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0xe41c13c8879924f6) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000001c0)={{0x1, @addr=0xb300000000000000}, "7412c67c26302b784d44610c91bbe007b0b84a618a05caf9056845ad4f4362fd", 0x2}) 17:18:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0xfffffffffffffe01, 0x6, [], &(0x7f0000000080)=0x80000001}) write(r1, &(0x7f0000000380)="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", 0xfc) [ 195.501399] Unknown ioctl -1071098328 [ 195.528181] Unknown ioctl -1071098328 17:18:02 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev={[], 0xe}, @remote, @dev, @empty, @remote, @empty, @remote]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) r1 = socket$netlink(0x10, 0x3, 0xd) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000100)) 17:18:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x1a9) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x11, &(0x7f0000000100)={r1}, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x102) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x100000000, &(0x7f00000001c0)=0x4) 17:18:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0xf01}, 0x14}}, 0x0) 17:18:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0xfffffffffffffe01, 0x6, [], &(0x7f0000000080)=0x80000001}) write(r1, &(0x7f0000000380)="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", 0xfc) 17:18:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1de3, 0x2e7f5e078acfd5dd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@msize={'msize', 0x3d, 0x6}}, {@privport='privport'}], [{@uid_gt={'uid>', r3}}]}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/110) 17:18:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x6b16117e6f83982, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x40800}, 0x810) [ 197.171799] audit: type=1400 audit(1565630282.772:51): avc: denied { map } for pid=8479 comm="syz-executor.0" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=30729 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 197.207050] Unknown ioctl -1071098328 17:18:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x31d1c2) 17:18:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000100)={0x6, 0x401}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x48000000000048e, 0x0, 0xd], [0xc1]}) [ 197.219774] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 197.219774] program syz-executor.2 not setting count and/or reply_len properly 17:18:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0xfffffffffffffe01, 0x6, [], &(0x7f0000000080)=0x80000001}) write(r1, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x29, 0x1, @thr={&(0x7f0000000040)="ed5c779d06e85ca0521b3026c8ec01c7f6d8e8e8558d850d9c872614d46e6e164afee027c162c87b171e109c306bc58a4f1a", &(0x7f0000001f40)="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"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000002c0)) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', r2}) r3 = syz_open_dev$adsp(&(0x7f0000001340)='/dev/adsp#\x00', 0xffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001380)="8d47cff5075d9c834e65147560cd3111", 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x69) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7fffefe2}], 0x221}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x141000, 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000340)={0xa, 0x2, 0x9, 0x40}, 0xa) 17:18:03 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x2c0400) write$eventfd(r1, &(0x7f0000000100), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) fstatfs(r0, &(0x7f0000000400)=""/239) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8", 0x0}, 0x28) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000080)=0x2) [ 197.405892] Unknown ioctl -1071098328 17:18:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0xfffffffffffffe01, 0x6, [], &(0x7f0000000080)=0x80000001}) write(r1, &(0x7f0000000380)="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", 0xfc) 17:18:03 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',o=\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 17:18:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="eaea13faad82be8b350bf9bc26f51020d401488f370e00622a712a02093d60491a841665cf09c378c3970b1964818e1f1eab2e0bf7c8c56b557eca364578b731cc1816f36ebae06a33f9c9127c2749dcddd68550e79ae55a4d175a8b8f001dd422499d3f2ec0e5c3a646ab9d", 0x6c, 0xfffffffffffffffc) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400806e, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="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", 0x48b, 0xc001, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x50f0000000000000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) sendto$inet6(r4, &(0x7f0000000280)="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", 0x122, 0x400c020, 0x0, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000580), 0x4) [ 197.553657] 9pnet: Insufficient options for proto=fd [ 197.562723] Unknown ioctl -1071098328 [ 197.576664] 9pnet: Insufficient options for proto=fd [ 197.594838] audit: type=1400 audit(1565630283.192:52): avc: denied { prog_load } for pid=8527 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 17:18:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x187}], 0x1) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x31}) 17:18:03 executing program 4: ioctl(0xffffffffffffffff, 0x800000000000937e, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="3e846d8b3aacf6fcc4827f96dac0450a635949d33be9352cb119e4a57097448d34fdb57fe76ac928ae1e649c6ee51fee902b4d38a1491bc143a1a806716b6458d242b7bea603e7f97dbc5a50f974088adf53c5b85af229775bdc446367440dbd2389ecf22671d06c98021da1208314b5e5a4c12943fa10a281b26f060e7b91322957ad8f8cac8e9349087cc6e4") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x115000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)) 17:18:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x401, 0x0) write(r1, &(0x7f0000000380)="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", 0xfc) [ 197.786240] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 197.801099] audit: type=1400 audit(1565630283.392:53): avc: denied { prog_run } for pid=8527 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 197.823870] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 17:18:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) 17:18:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) ioctl$KDSKBLED(r0, 0x4b65, 0x8) write(r1, &(0x7f0000000380)="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", 0xfc) 17:18:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x2, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xffffffe4}) 17:18:03 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x24, 0x200) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x1, 0xfffffffffffffffa}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x2002}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, 0x0) 17:18:03 executing program 1: ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) gettid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) unshare(0x2040400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'bridge_slave_0\x00', 0x3f}) ptrace$cont(0xffffffffffffffff, 0x0, 0x5, 0x9390) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getegid() recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f00000005c0)=""/99, 0x63}], 0x6}, 0x800}, {{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/42, 0x2a}, {&(0x7f0000001780)=""/240, 0xf0}, {&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/81, 0x51}, {&(0x7f0000001a00)=""/93, 0x5d}], 0x6}, 0x5}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001b80)=""/129, 0x81}, {&(0x7f0000001c40)=""/228, 0xe4}, {&(0x7f0000001d40)=""/75, 0x4b}, {&(0x7f0000001dc0)=""/221, 0xdd}, {&(0x7f0000001ec0)=""/147, 0x93}, {&(0x7f0000001f80)=""/206, 0xce}, {&(0x7f0000002080)=""/181, 0xb5}], 0x7, &(0x7f00000021c0)=""/101, 0x65}, 0x1000}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/18, 0x12}], 0x2, &(0x7f0000002300)=""/138, 0x8a}}, {{&(0x7f00000023c0)=@ipx, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002440)=""/174, 0xae}, {&(0x7f0000002500)=""/91, 0x5b}, {&(0x7f0000002580)=""/167, 0xa7}, {&(0x7f0000002640)=""/24, 0x18}, {&(0x7f0000002680)=""/11, 0xb}], 0x5}, 0x1000}, {{&(0x7f0000002740)=@rc, 0x80, &(0x7f0000003980)=[{&(0x7f00000027c0)=""/61, 0x3d}, {&(0x7f0000002800)=""/202, 0xca}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/76, 0x4c}], 0x4, &(0x7f00000039c0)=""/81, 0x51}, 0x1ff}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/131, 0x83}, {&(0x7f0000004bc0)}, {&(0x7f0000004c00)=""/194, 0xc2}], 0x5}, 0x5}, {{&(0x7f0000004d80)=@isdn, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004e00)=""/20, 0x14}], 0x1, &(0x7f0000004e80)=""/28, 0x1c}, 0x80000001}], 0x8, 0x2000, &(0x7f00000050c0)={0x77359400}) accept4$bt_l2cap(r1, &(0x7f0000005100), &(0x7f0000005140)=0xe, 0x800) getuid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x700, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x1f, 0x101, 0x7f, 0x74, 0xaa5e}, 0x14) 17:18:03 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0xff, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="7365637572695479030000000000000000000000000000000008000000800008000000006f"], 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 17:18:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:apt_var_log_t:s0', 0x20, 'user_u\x00'}, 0x2a) write(r1, &(0x7f0000000380)="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", 0xfc) [ 198.084233] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 198.084233] program syz-executor.2 not setting count and/or reply_len properly 17:18:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:18:03 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x800, 0x4) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba6a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 198.136556] audit: type=1800 audit(1565630283.732:54): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16622 res=0 [ 198.173067] bond0: Releasing backup interface bond_slave_1 17:18:03 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="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", 0x5ef) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000011c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) fallocate(r0, 0x0, 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) fcntl$getown(r1, 0x9) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @broadcast}, 0x170, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bcsh0\x00', 0x8, 0x2, 0x101}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$LOOP_CTL_REMOVE(r3, 0xc0045878, 0x0) r4 = add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r4) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000007c0)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000940)) close(0xffffffffffffffff) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x20, 0x4) 17:18:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000380)="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", 0xfc) [ 198.288392] audit: type=1400 audit(1565630283.882:55): avc: denied { setopt } for pid=8559 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:18:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000380)="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", 0xfc) [ 198.651718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.660411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:18:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020226bd7000fedbdf25080000002c000200080005002e0e0000080006000000008008000900ffffffff080002004e22000008000400080000000c000100080006006c630000080005000900000004000300"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) 17:18:04 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x100000000, 0x0) close(r2) 17:18:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:04 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40c4) 17:18:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0K\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX\xfc\xff\xff\xff\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8P\x1f\xe1)h\a\xe8Wn]\xe4Jd\x97YF\xc6\x88;\xc7\xee\xecy\xba\xb3\xfd\x1c?\xdc\x97V\xed\xf8;S$\xdf\xef3\xd4Z\x16\x94\xd9K!P\'\xa43$%n\x8bU*\x8f\xc5\xab\r1>\xfefE\xd5V5|s\xff\xdd{\xb1\x83\xc3\tj\xcd\r\xea\x1c\x86u\xe5Z\x92\xdc*\x06p\xa2i\xc6\x88\xfe1\xe4\xfen\x1a\xfb\xd8\xa9j~\xcf:?iq{\x9d\x82\xd6\x03\t\x8dO\xad\r\f\xcdB\xa5\xf8XU\xf7VW@d\xb8*\xb4\x1b[\xfb\xed\x0f\x85`\x1e1\x96\x9ao\xa6\xe3MT\xd9_\x01\xa4\xe5\x9b\xff\xcc\x83\xcdd\xd2\x11i\v\xe1\x17O\"\xdd \x06\x8a\xf1\xb4\xe7\xaa\x8c\xa8\f\x99K{\xf7\xf0\xa4\xbb\xcd\xc4\xe7\xd8$y\xf6\xdb\xfd0\xbf\xd6H6\x052\x94\xaaQ\x89<\xd4B`E\xc9u\x87B\xedl\x90%\xf4\x88\xa8\xd3\xd6\xf3*\xb5\xd2\xe0\xa3D@\xe0\x16\x9e9\xeeC\xa6\xf2\xa4e\x8dEibI=\"`\xd0\x12d\xf1F$\xf6y\xa2\xfd\"\x12u\x94i\x96\xe5+\xb4X\xf5\xd8\x8a') capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) 17:18:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008841}, 0x4011) 17:18:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r2 = socket$inet6(0xa, 0x2, 0x4000000000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) write$char_usb(r3, &(0x7f0000000140)="f0cf2351afd6557b4117486b0894220492decd13838f17697ee503049e0d95ac3e01bd80b88db6182a4c415f02c331ba13203e4b71ccbb756547dc1a8224d715334340c3df77a420ac63b7eb14faa1ca423bf91316c2f471f0ead79c580c9657a7d039ab07c3e6f640b30087110214a97014f921e469d1618a549b0d63388ced896741c6092957b9ea13369a1f4111bb4e5ec43548b125f5f5b6f93e7352a1108997bd645faf6ef4b2f02da2abb6d2c5", 0xb0) write$char_usb(r3, &(0x7f0000000200)="3d13f4fed8b6ed7e37a28bc75285e327ef6b97dd95bf030e542db8d2c5dd797a6051d713bf0cecb7175e8573d6348c0710acbc49faa087cd0473164ed44594b862c6abe403eb1e0aca03a241c5bb84a570cbc5fafa05851dda628a6ee8acdc5e4f0b012bfa6cfed32033a2efa0754d55b249a16236b045a5d2bb8c9ea64ad4d797860a6a1820da90e6576bfa28fd2b6083756bebbca6c6d89a09d30397182a9db7835628ab1d1eed8b33ff4117a1571567c35d638f020e", 0xb7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000282, 0x0) [ 198.951444] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 198.951444] program syz-executor.2 not setting count and/or reply_len properly 17:18:04 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r1, 0x0, r4, 0x0, 0x2000000000a, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) [ 199.029375] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 17:18:04 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$setpipe(r0, 0x407, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x480000, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r4 = getpid() stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001280)=0x0) r7 = getgid() sendmmsg$unix(r1, &(0x7f0000002740)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r1, r1, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, r0]}}], 0x80, 0x4000080}, {&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="a27fcf2f808fc3ef507ff976a7020cad81992e82f3d95467915125ad9958404f306191397c35ad5a2ce7a2230311df7c1d3a76ec35ec7baafa78426a770681", 0x3f}, {&(0x7f0000000680)="1cf84089f7bc52521a2248b5059c063e978f399bec9bd8f45ef01100117072111aa84ee6cb244744a5dc113edb20f5e0a4a901915d2285a2c3723cb42163ef97351b1d2960acd82263ff4cb7fd504ade32c7d1c04bdb32cd4df1389d6c29f0b578c8ec98a7e9a71b8e9b4f744cc0c47b80dd6c23b6a5626990df1c2c9bcfb0e6f22e2670adaa936d82f440f6abd6d6e4d9c89e73cdc6f37ac934a14af02a07f88e45ac0c3b0c2888144d1e6f094dfcebbb984ac3b9541c7378e9a33d89d68a311d113e90de328035307fb0a4b6", 0xcd}, {&(0x7f0000000780)="85ded5bbf390189cd3819b27b7e07e86b72207f26a580e5ab6718d63ab945a5b35b4fccb8f6c9d3936c5bae45f19fdd6c763effedf1c8b43c45ff92dabc634056b5ba09e540199a835ddba12f9f1eeadeaa60265d4abe37c9887296f91e650b2ef07c75dab05045604af16b0a21bf050cf2caf2db412b6dcb6fe0ccd6349e6b697d34d32f7f2ccc7050c116b1646f7d2a58a35df15ac690fd96f26d04f54477713203435bcfa4d1f92163729707815cdbfe70e2ad24fac3d4009707f161fe04c2233e95e65d0550622ce9704c643cb3cd049", 0xd2}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000940)="d55849d35648d5f9dea698ab6eb656fd1b6d95a77971c6ce39101e04f2351ffb721fa7f28d7ee29d8a3da2d36bbb4314178f5167af9781a8a053e3b9e2cfcb66fb299499cdf478d6d4fcc73822d0f21e9f405eeb1327725287", 0x59}, {&(0x7f00000009c0)="a98b53e606e1ddc26c4d450434ecea638ea581931edddfc6bf7b8a1d2fde8057cd66fd082a32e06abfc147e2ec6b3d75b8d8eda67908c0f52dc055673c05182ad8af8af9462e058e56071602aed85d45ef4944e7ea4ec117081c858e62de26217aeda0c800eb703841c265611f6107ff59033ff2fca35513496559ba76c1786c4d58f270af7dbe92e306b71567405d490b3ef3b9056e8595541122fd04", 0x9d}, {&(0x7f0000000a80)="8adbb1e2d5a3502019211d2d8c9b8a8571a473cbf425cd95931bc355d74aca4f51d01fe7dd389a31762a58b9fc6080cbaf85a2a2efb2", 0x36}, {&(0x7f0000000ac0)="6363bc6528b170995f360d49b8d94291b7900fed4d5f1ec50a58dfb41a989ee6cae0336f1fbf818c3f436b08437de7c29d598f63c5c144d029c08365b78594a0ea1fcbe20aa8def3a6415514b90497a73d01423f37d0eaafdbc0b479b8968bff1a1c7d97e837cde25612236c33ec200f2b961cca2c03f74763f34e593f5bb0548a0d825e4e77b24789f17ac4a460bb08f6c970356544facd5e6a394f2a5b011f91745469e7bfb3055e5944a11254f72f39b629e625ee2c7e0434a96ebc4a22dbcabc4ee9b572543b", 0xc8}, {&(0x7f0000000bc0)="c517da9bdc4ce4c78839811ee2f4eb8b52fc739f746098304ec0d04680bec306e12c4e3e0ea9e8833ce5749c9ffd0d60f14db8b15056767bece6bfe69c048bc57087b6dc9793a0330550d85a552e43a1bffda80aa9467b3e01ccd55c7602642e38feedeee6bbc4beda08ca2d37e33c5fd99deaf759896c93a082cab479f02533a20da913128288aa0985de139a37ba58e46621b42e28e5a29522f0b2ba7a42bcdd0e51648077f0f1795f20599dd574b263cb1f0048817d1d4e30caad839a49f92f3601c8fe998e426e49b10557c81c1057a36b20369213f94eb5bc1160ca66956c30951bc2677361bfa65d778bf205d34d620881b784a0f3", 0xf8}, {&(0x7f0000000cc0)="c6db09fd7ad8734aa02af2cd6b2746fa619e7fbef046872ee2b861da46a5ae5bfc0c83bcec77c234b562dac2b89155bf2a49c0b1c0a9364097a368635e45b552c1f4926dbdddafe09bb7086cdebb492f", 0x50}, {&(0x7f0000000d40)="be9134f61c0bedb991a4d50e866336071019440f1dc12bc67407d98b514700eacd59530594810aaa119b08a4571bfe57cb199774ce6122b24269f3214e79391c9315e5b8607277763fedd3bbf67773d0440310bda8b26bbf38d3eff541b6bd1259f6d675ac372e60ab5f1039e0ad99e0407cf5e1b2e29da111e1e310749ad7431eafb1b5cba2b31e65714c1627a5ab", 0x8f}, {&(0x7f0000000e00)="ca5c3a125d38d553311ea06bec217ee04e02bc9435dee40a49f7733fce9e1672073a8317ad4ea16b1f32f7972acf5857", 0x30}, {&(0x7f0000000e40)="9e2b37752bb99ef941ea90f98294a74236d982d210abeaa9285a77bc0c16d2c35346d72e", 0x24}], 0x9, &(0x7f0000000f40)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x41c00f4a770d64cd}, {&(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001000)="9a06cd1d344cfe0fca646bc6067b5121e0d7935199b92f5231289bfeadfc32f089631571a11fddfb43a2ca4b79c859f8d536686612750d05e0054af8cd6c08ed7165ddefa85f7ce4688f6bca23fc818f0c0ec3441c2732ed24222128513600f96eb72be7f5eb966d2d4e53082abd471b0909bf0cf1797d31f64abe5aa1b35d89ef3d214be2a2a01708d387f84a152253002dbca3170a94b30c96fe395193b588162b7195d08b7c4f3fb4fbed73bf001a03d609180e6acbd218", 0xb9}, {&(0x7f00000010c0)="3457d0b2fd0456fcd2735b70fdc4cf0bd38bb9b42fab85d3810d4520f078f845ed1c61e04a1116443b6de88557067bf84ade3c697ba86a722384d178baad36adba5145296480e3c16b275d9f1267f9fde14c07f9367bdafcea6a1c1c0f75e5ec11d2407a93d4051ca24742f2da965244c58771623144e8af8c2dc78a18d89c3cb98bb49a8e716bbf96da3e88eb0936bf329dbebbcb85d328362fd3", 0x9b}], 0x3, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r3, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r3, r7}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x60, 0x40000}, {&(0x7f0000001340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000013c0)="5d7e73f26745f2e95d7453162f91a1b65aeb38ede848b347832da3fe611a22bbae9950f08b25073e2c5c10998cfd67de4f4d7105ea703f258e0110682bb77bb0bb599ea501ac938e884470cfbfe25d027bd9635e103ce65e74ed49af12c0aaa52cbf05df34f4f9daddfd4866b26679f289e0", 0x72}, {&(0x7f0000001440)="3dd52b8b96567f60a0661cafce84f840358410d2b916b0dee51fdfa809ac86b3bebcacaa68ffbd5f84ca69cb4a9f15a7f45758c298a20875343f9dd60e894f7688ce9662faa37e2acb0d8f939e292f75d130b8c38d3cb96b8aec6d1e1e8e281ec6d6f7db4094ac9b56362340e51ce083106437486f3b4f9b91ad19a9897903d55b7d5bc3f28bbc09001c1c50d0437d640205e30b1f4e8d64cbaedec1b0879eafaf60fbf21c81458fadc397011846d9a046d1a384a47985a101312b8e35929b06ad79086ce90027a320b073744e87", 0xce}], 0x2, &(0x7f0000001600)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18, 0x4000090}], 0x5, 0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@rand_addr=0x4b4, @in=@empty, 0x4e24, 0x0, 0x4e23, 0x100000001, 0xa, 0xc7ce9b90b0c2fd94, 0x0, 0x89, r2, r8}, {0xffffffff, 0xdcf5, 0x8001, 0xad, 0x3, 0xf7fd, 0x0, 0x9}, {0xf6f, 0x9, 0x2, 0x2}, 0xf36, 0x6e6bc0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x3c}, 0x0, @in6=@loopback, 0x3502, 0x4, 0x2, 0x1, 0x1, 0x6, 0x1}}, 0xe8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000440)=""/205) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000000)="1e08b0453e53c3df3027d50fe80c71af", 0x10}], 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40090}], 0x2, 0x0) 17:18:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x3f3f75f13ddaf60b, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x4000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) [ 199.206694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21310 sclass=netlink_route_socket pig=8636 comm=syz-executor.5 [ 199.285528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21310 sclass=netlink_route_socket pig=8645 comm=syz-executor.5 17:18:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') 17:18:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa98926fccbafa826, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:18:05 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/45) 17:18:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x479f0843788dfe1a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000080)=""/10, &(0x7f00000000c0)=0xa) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec6}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0xa6fd, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1a) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/83) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000140)) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:18:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r2 = socket$inet6(0xa, 0x2, 0x4000000000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) write$char_usb(r3, &(0x7f0000000140)="f0cf2351afd6557b4117486b0894220492decd13838f17697ee503049e0d95ac3e01bd80b88db6182a4c415f02c331ba13203e4b71ccbb756547dc1a8224d715334340c3df77a420ac63b7eb14faa1ca423bf91316c2f471f0ead79c580c9657a7d039ab07c3e6f640b30087110214a97014f921e469d1618a549b0d63388ced896741c6092957b9ea13369a1f4111bb4e5ec43548b125f5f5b6f93e7352a1108997bd645faf6ef4b2f02da2abb6d2c5", 0xb0) write$char_usb(r3, &(0x7f0000000200)="3d13f4fed8b6ed7e37a28bc75285e327ef6b97dd95bf030e542db8d2c5dd797a6051d713bf0cecb7175e8573d6348c0710acbc49faa087cd0473164ed44594b862c6abe403eb1e0aca03a241c5bb84a570cbc5fafa05851dda628a6ee8acdc5e4f0b012bfa6cfed32033a2efa0754d55b249a16236b045a5d2bb8c9ea64ad4d797860a6a1820da90e6576bfa28fd2b6083756bebbca6c6d89a09d30397182a9db7835628ab1d1eed8b33ff4117a1571567c35d638f020e", 0xb7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000282, 0x0) 17:18:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) 17:18:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 199.856781] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 199.856781] program syz-executor.2 not setting count and/or reply_len properly 17:18:05 executing program 5: r0 = creat(&(0x7f0000002640)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7ffffe, 0x11, r1, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) io_setup(0x93aa, &(0x7f0000000000)=0x0) io_submit(r2, 0x7, &(0x7f0000002600)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7ff, r0, &(0x7f0000000180)="5ed98ddfb767d7f8e7202d8d296ae5bc23ddd1c4478162afee8ed49c958d7292504e13bbfa9b22b703626a681645c56dbee825e5e3efb7e63461fdab3cc9e633150545ba5a48b3d261656847ff2a86dade212d76a44f7d41cb30bc1c97717f6e034fdcf383b0b18be7e4ada8632777676b1f47d249e2bd94637daf236cfb7e8f4702226f06f47cd25438288c42c975d3e85ebb14304e50662962f02be08e4e511b4eda6e0e6c895662a84f0ccace569b", 0xb0, 0xeead, 0x0, 0x1, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfff, r0, &(0x7f0000000080)="db410e622e385edf6a28721106c94a36", 0x10, 0x4, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000500)="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", 0x1000, 0x4, 0x0, 0x3, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f0000000280)="706836e1d9367703a407ffe417ad116c0eb084a44eda0db0a18831254f3571b6ae37f3afba2ceaba0815fe8dc0d432b7cc2262a2c0c359ef39347516c9b3334c3850e00999891c1fd4631cc1264d9e9a88c30fa7f7c7494b6ccf48b18f286f9178c4be3fed65d3c98c3bed4f01ff50e3885b3016c4f38f444ba3b6e72639f71d63de273be53430054220db85f9420b52f05a08d76219f77f744484b52fd67f09a2d3f1f3e00f4e16b726b42ce09b13b2aea383901ef7d7b74e9e38d6d1e4ad7cdbf4ba07d158b84c5f630b31adf4bec44de86b78315d2f759c4f0125", 0xdc, 0xbb, 0x0, 0x3, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x89, r1, &(0x7f00000003c0)="468869719669f36b2a2f6ede628b3b7569b508f52a11a0a6b5a17e26fcc5e403c0723a37168f3c0ccddb2b1d3dc625319d1fc02496cdfb00114eacd15e0eefd22be30839cd25e79dc28fda231fb0aacc6e4659787dedfa499fc54eff34a9c01dc699b1be71bd5dc107e9b2c1cc304469338330c637f817e5016b2c236a71a29e0cd84be114a95f9b147c5e504d5092f55e0aaaaf7b298eeac346519ebf605df37e670551be4aaa", 0xa7, 0x80, 0x0, 0x1, r1}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x7, 0x10001, r0, &(0x7f0000001500)="a8dd3b7846ffc6a76539509f397d2481bb30ba411bc2fe375f46aa0c9ccd3a344994e94ceedc7b547a310e9024ac6cad95b51b55d30e598927ea2e45b0b56c4bf5815c49b535b582a1ea99389d9ce5fa80ea8c9686cd94a90fbd2c31c9b1bea52a8422dd71c3af572aff0910ecd63316ac5d95195decbc9bd2123814759c17fd31d76e7b9d01db3cdc8f016c0a0b69d3c07747d7f80154e9a2d5028888db3236e8e524dc22d53c52a33ba8a53574aa1dcd2241010fe1f76263546269b968f4e7756fecc79f2e56e72c80702f5ee00b03ad370b015cd8d54d8a82c5a8be113ef7e7cc0a98844d627173237d1f1acc06a0da82595299744101d20bc982309f9690956df54bf33ae3867d93da0652f2efd366040e523c398e0bf308ef38c6737441e59a58f6274ff203797f212f05ded98d25a49dc1ae08d4fbc8bfb5c3bffb2c765068a60e36e35c70414e9e5b254cc81efa9805ed67ac0d6cd03f236f0a824a61d675a59367de86e00973c85edfbd7082f212f09a0ecff324f47a012fdd00da12bae1ca28fcc3700915221d685cc1e8c3804a3e90721687d635813748f4747d003cb4e2720766dfb774dd4b6b3d90d15c47898bda7ea1fc3917883f69176fabc1ad092f0fdd3afe34298886ff89798d8ab4716ffd154bffb4f51b539b136719d82895d4cd9136fbf5fe354e34ef188abbe4e216a95dd24c961a344044b9cb8a775d3744603c4b350e311675fd056165ce89ad52f7b71f5e4df82031e7df9ed3047cc69f22ce9b8adb5b85fe4d427022f06b73851b3d79eeb264d772a0960b3098d7d04749b9646f107c995f2cebbf18d5ad5c6e7b1ef3d4b45df89f90f9152a71fc35114bec2e5472a521df5ced2e03069290b7c1566616e527b37f642c19f2ba17dc5edf768a236e56030a26dc4aad70c7d5379e36564d98f34367cd1ec80cdd45dd93f3c6279829c1cebad4e5da6efdebc84a69409b0fef74a10f151dfc35fce16a66fd9e2df8263921992c3f4a85571e42228cfb99d6d047619cfb9ba076be6223ed0cfff088db44f7875da77d3ada4f6f6ccdcfe51f9ecb01bdd60f214e73a109be387f9a24f0d2c3d975b863e9589a9e39534233ae996294802e66fa48db3d7574f2250d068ace685090c7eaa1803b87c7fbfaa4e9145e212ebd5f816809bd760b09689fea62d5e2f78c6c9dab0a1a3123e0bdfb65411b461b8fcb8250ae43a3a762b6017a524738fff182e8e991760a884e857a39477a9559a6cf626fe8a0ea87de11486a8f6548e3854305a7185fb49d0de74a85ec2d0cc7c92108c0fdd96ee46d8193c68ee7919e8d19e7e706754acafaa0d3936969e43ec4562f3c4573905cb247c67c18623dffeed28d7f270ed20475cc9152eda03a50762c1a5d4038e86b1f506ca2ecf364caf9bd8463f708a1b35f2287c7bd5d7b407cd2257d778f32e17334af9c947b176cfb67e17e96fc2de33cd97bd43b79122cf1e464249762c9ad168e4168d721e89309a8f384fd4cad73893d25c2fca5210463f7e1c2c9150f555932f69ae849ad551dd5e93d4decd31f69dbb53605961626b058f71408415f92602cf3099758914321f03151d95b969a5e81144f7373791fde8f56ec6557162c56e90f5695cc78e39c17f253db5c2505c458fffbce67d8e97a90739e7fe8a6fd5771565a02858d38b38939dd6e5a47e9026156482486872298a34459e33c8696b628f446398a49402cf25935ced52a52b2195daba3cce1a12b08c54796036db17b00f0ffa8f0aa612cc0d98a24166f87a2759d05962f5b32e9c2c961a9d49b957a86bbb0888c1750255641236840da9b220f449e11358b2c89f79cdd6000632a816ad2a20d5c123e6c3c6abb42d98456a9b06512af39bee42faa1fb1e7203ab9727ac60106f42d7face032bb123982dc243f519465e90784653e245ddf56ab0c9f03ffa509c86f8bdf134250afa77ab3d494da8d6c2bd9c0a91b390c8f4fd088c06c889e1ddcc309e6c931d628ec1f1227fbd324b5b6fb35421d7ffc1051672e6e644261d0b05e6555173c7eb9b10c86bb52d7987649a11d0436d9e8211101a9a004dca98f5c8578a5818cd5cfedc5d51c31623bc0cee3ef108e6241d6b85d0963fb83ed11ecaf66e431b0dda74aa17b98c586dc2db4b874823481d76493fbdd08353c2bec27cee94cd0a9d0d7f49f96354e1a241a6dcbdca655928696f99c8ce3e88c5c004e3579ff1776c4ec3204d9f713bcc04348ad896a8699aaf42b45a4a6155351051403b8a1b40e16ba88d499dcfa42835e8234a952d15da94b451bf511d3dce5107d5602eb46bdba5a0c3ae7e61bd73b1f1bf461704338dab27955914215fcb2af55bfe3689ca036593cc25ac6e62e85443fe12601c88cfaec374279441e95bb6d620b190b2c5bcde8e371d10a239a48f8e7d70ebe4d2c45bf18436cb3af5c6ef0088cc20e3587b344b7ac602bb4534f1c087c6408fb6ef12de51a1bbe2c88f70839b27f0703e13d9dfcbe216163f65155e9d529f758cf2fc64d47f8ecef208962baed6bfdbc12ef32ab7cfd3f5e7d60b2734a678c90298c0d5e8b55be299454ae63aef7cf008b615cc04c4ea541932f29e2ef6181c45f0dc85ae37fd9e71364b1eda9d94a4411bdc163b2e71a441ae9816146ec7a6b15b7eb561d4f2097abcb1076d25a0093f4c6e925e03d055572ed1b9ba9dffa87241dbbbd37bc51b8bde598325a609ddbfe7bb437cffe41a728aceb6e3aef8d874e875793f635d58ce7357971bf8d0633849e336e1467b895b2faa574e670572f893a2493ef10d409c9a4106873b622009edbec3acb17008e3cc99acac836de4742160214406cccb453712cdf12632e39d296de4cf7421792503dad036ff49d87fff18f052a2c85a4c5c702b34e2b4033d688e1d2d4034bc48797d203d7f1a1d7a4340133551d021b070dbd38ecefe91866f97ad233a787206455239153be8531416119b9c9af49292ea41cd949d49232a1065769d57c4560c4401969622c0ecb1c7550bc41bb1c566f0710504a93bd233cedab8aec529d3bbcc538db5279af93198ac085b1c42591b1723b5015a9f7714c114fc0972ecf0e79002e45bbc5e73685f3a7f9db761494f92ec0ef26dba39c9e08102b2dd22f171045b7ae1b115e64dccfe44f64253a947bc377fb77d1b614eae4465e7bd52bac45e8c005c9e3fa5ada505442cb0d2dfc41eb1e5aad31d27e7e9c52c46f0652fa3a97b00d06132bba34bfce20c53c60ac4dbda0b81c7a21f854e8d500d6355020ecbdaed9c20c796d7996a1243e87b2a832789f5ec6e526288ae9ebad9481d1556b2416399df5ea570a94de95eef2d410176d8ed5115ac2676fdf5dd7da2b12407a848ef102402d626267539f61c26b66e926fb06d460e821bb4e21cdba801a9ab6227b5ab7d624e6b0494c37e0ab7c31906a29e6d222793af4764b0cd45705b9c1db552bb1976d567e146c32407116e3722aeed81f0509f9f446575ae0f5ba2f7d7a8f07dba047b953895f2e7b4e6adae320bc89081ca4532bc5f4c58c697aad81965f21db7159db31a5a27d1bcd8ee892dd1a1a6566bef9d58e8724400cb556a82c5a59493bb82106d53048fa44923930b409709a0d46af59682de3877ed113a6f232862874aaab32787bc510ab3f19c4fc252190e40d174865d16c3c3e16ef71cd436895a42d693f8cfe2c19603625c69703289ccb2ebdeee9e1d6d80584244ec571fdcaaee2c159ffe588045fcfd7077d37dc1d437404eb433a27a2ad86f3febb29d3f776378d55bc8277eabc9c22a7745a674aa0ef8be02b1b7fde68cce087b3fc7ca55854bb9b0e2f14bb1e81345eddb49e0044c90f5dd57d41ae86d1da248c9450042ed1266e44039815fc4c2a378ecad99a98c483a7ff144b81188926a01cfb0f02b7afbeddeb4ba689b1fb2c1fbde675cad2e2a6ed816539aceadb08e9c023d6e04d9c44ec7c87639b55a1ae84691c8035edd7572a17015d1b2a5ca27fe7622481f971237f3db79209c2124dd71eeea958df89948f79d7f79a3c5884028401ef058a3ee8679da79c7a6a3a57db9027f0996823ab0692516d326c5b70bc77a50a3cc886637cbd0aa61238b1d2e2ee7d8d78eba736a92effbcbd5480bb95b657f9e996b0ed9a8c6778af5555b96c9e1af0b91e9fc176416916f8bc110846beadf75c34f8f91fbec10a72b378e44e15890ed768bfc49af9e60a3fce5efcb8eccfb7de2da62b77b075df041aedbb001f9269b0ec4f8c759012bd192f97034cb2e882afbe7f74ccf336f4f6fd4a1991c903cd317cf2a43429f720fe8e6bbc0874e9980c382960ba59b3a6abc2ce4e33d79942dbe946918b43d7675955851e291370f7207ca62be189457cac86043fc33c716b40264d9ce9730243fc846f94e33640c91ab2bbbb3a31f7f2c42925eb611d9f6756c4831477efc2e8a92fc0e38435e9712c52892a8136da4bb1c5a68b25c5e740178277e0cba9a09225e44c58c51574a6022297daaf25f31067fd6e44b7bbd7e8ddf6adf9536bf9a4b6c544c687af06af95e688de4d746d83762fe1d8a04ae649c38bf1e6e20095990ff6d7c6a9bf1353bdb92918c37f82eb690fa66679f0c9ecfb5331926eb1d8178d8b0eeb7729f38adfe87aa449f707fd79b6513f77a61933229f495f9fe873155cc2ded1cd8e45a92685378eb3643eb33e7fc3c999bc13e9dcd6478636389b622c7d9cf2dac7289d70ad10b5d58edbec64a580bcacf4ed0b8fe5004e2af5d5c69436ada55cbe4b7423f0e42b87351a8cf5f7b18f52caab0b9cfd58a83ca06ba3dd9f310eab85f37fb4f3087091fe535d3e4bde454da0b51e5e03a9b4428294f6750d68257388ea693988a6f71d823caa5437312377b3becd868cb72653871c8e4cc08171c9b9aadd721cde1596fb08730ef11c2056aea0a017b9928e709fe19fefd2a09e4f4554221149ee6ea3eda7a8d1c1c9bab5264d8c3f64f0d347c23b403fe9ca3b1cd1eab282ac41cc1ed629876de2447a8a911aaca97ea9f0e5b30e00b98abe98fd249e76671a98681e61f2e5c8d4a72ce7569d1d11e549d187996e7e819d7b7cb66874f1178301bf36ab189f7d19389d126c30d98abf3a8545e84bf51cfba9cc6e95769cc90f59cc4161eacbc3df4f3e6e5f8c7cf0159519547f55181b61b3b9043b63b843c55d1201f0461666abed64e645c7cf69fa8494b36866acb3c3690759bd97d69b052e8b3d87fe407c7a4d2b62e4f32b8f86258f6a20c6382ec4cc1559b87cd97f4147f1584b7ae1b771abe38e692001a1f630550459e4b2a2cfd4a0554020ccf2a1e313c44bea9365955dc56337856ba58929b918447fcc8c1e198ecf2acd4faed63f9ff93bd3a33dae2e82f7f4b9c7a930a59538187ae04db2a8cb2a9141af93315df764523685309b625fe2e46e610159017b69b3fa02dca09b50ebfaaa5ad63bfe0c510984d88d2703f56c80556f45491570710fc3a52a8b05afc605f710c10464837d4de6c4ab6e3b207388c8993c136ef9b5b476468ea1b01dcdb409b20127a3487d92329397de2b4c7617253f8e8b4b944b9d537294029dc72c0fe2387c7ab05a228f55cb52338016fb46c827bb9b535980124e9376291faaeaad59161b73b1adc485adbc2fe0541ee005c318d6d7e98491c4ee5781e980576882e9d5f4aa67c25457b622fd811422410b5f7fd09c552695594260a1cdbbd04d4ea0bff44b80473c54eed403be4191418df753db66fd922716c91f64be1ff83ba1d22ce488453c90408b", 0x1000, 0x5, 0x0, 0x3, r0}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0xf3700000, r0, &(0x7f0000002540)="50773886e9bfc70e46cf8d4ac4c2576320c65632d71b861634479a9730876f068f41e0b2a08f6bf549378b4e9f4f6a06384512ff30b4d57c8c5aa89a3f1b35ce97746ad11a984af92ae2eb10b430135ae1b5eb093dc3904a8240", 0x5a, 0x2, 0x0, 0x1, r1}]) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000140)) 17:18:05 executing program 3: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x208001, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)="24000000560007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:18:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x39, 0xc0e3, 0x9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x43732e5398416f1a}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x9, [@dev={[], 0x14}, @random="631b23265507", @broadcast, @link_local, @dev, @empty, @link_local, @local, @broadcast]}) 17:18:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:06 executing program 3: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0xfffffffffffffce1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="f3c19d21611d9b703c8431", 0x2ca}, {&(0x7f0000000700)="03babc762ca90c50e6e2507acd6898f2a66d158ecf9a6d12d122342ca4d6f97deb82f2059936f2589a4902f01ffdf5cff774c04db277c1613c5ae2dd0ca221ab64697ce9d96bebdbc26dd7bb5945aa7f05", 0x51}], 0x2}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036db70905c1210a32b4e55ccf3703fa7a22d56e23eefe84f82538610065961bb224a190b9d4f39f7373c3b925334bc9a2b792db0c9f557ee80456581ea0f841584d149609c203da29e6a1adc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002350dc6e81595cb800000000000000000000000000000000000000002900000000000000000000000000000000000000000000000000000000000000000000000000000000000000812cf6c35f4bd1871a0000000000000200"/452], 0x1c4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x27, 0x1, 0x11, 0x15, 0xb, 0x407, 0x2, 0x8e, 0x1}) fdatasync(r0) sendto$inet(r0, &(0x7f00000012c0)="68268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x940, 0x11, 0x0, 0x27) 17:18:06 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x2a) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000500)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="c8078c00000000003a7c4329332fe0"]) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x401, 0x6, 0x1000, 0x5, 0x4, 0x0, 0xffffffffffffffe1, 0xff, 0x6, 0x7ff, 0xfffffffffffffffe}, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$vnet(r2, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x7255222757a4a93e, 0x1}}, 0x45) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x3) close(r2) fcntl$setflags(r1, 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) io_setup(0x4101, &(0x7f0000000080)=0x0) truncate(&(0x7f0000000600)='./bus\x00', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0x0) io_submit(r3, 0x21f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 17:18:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.corrent\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x1, 0xe1, &(0x7f0000000480)="13802d6658e654ee6bd9be4dd0978285ba88cf675ceb5f1aa07c9bccffa2ea9d7ab4a48bee643edeb65099a81c302d15fbd5bacd2416cf3f0707ea29c852c317dbc13e4042fbb3195df6184fb13f97a3637d28b03140bc39f2c5cc32ad25c5f2fe0466e63b16b313ee6f569fa0da645069280320025559805de17b0027412fa73d054683b6d010d4583c3412bfe1eb214b37b6b677a3746efcc599e611e451a064e3416409a8107c1173710834b9a973cb51d86c2806a0e3cdf84edf9aa67c564179fd1620531e29e9f0af0a6e6cd11844caa52fe6e9206b7893d0c72ee580edfa"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x2710}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @local}}, 0x1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:18:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r2 = socket$inet6(0xa, 0x2, 0x4000000000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) write$char_usb(r3, &(0x7f0000000140)="f0cf2351afd6557b4117486b0894220492decd13838f17697ee503049e0d95ac3e01bd80b88db6182a4c415f02c331ba13203e4b71ccbb756547dc1a8224d715334340c3df77a420ac63b7eb14faa1ca423bf91316c2f471f0ead79c580c9657a7d039ab07c3e6f640b30087110214a97014f921e469d1618a549b0d63388ced896741c6092957b9ea13369a1f4111bb4e5ec43548b125f5f5b6f93e7352a1108997bd645faf6ef4b2f02da2abb6d2c5", 0xb0) write$char_usb(r3, &(0x7f0000000200)="3d13f4fed8b6ed7e37a28bc75285e327ef6b97dd95bf030e542db8d2c5dd797a6051d713bf0cecb7175e8573d6348c0710acbc49faa087cd0473164ed44594b862c6abe403eb1e0aca03a241c5bb84a570cbc5fafa05851dda628a6ee8acdc5e4f0b012bfa6cfed32033a2efa0754d55b249a16236b045a5d2bb8c9ea64ad4d797860a6a1820da90e6576bfa28fd2b6083756bebbca6c6d89a09d30397182a9db7835628ab1d1eed8b33ff4117a1571567c35d638f020e", 0xb7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000282, 0x0) 17:18:06 executing program 3: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 200.729490] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 200.729490] program syz-executor.2 not setting count and/or reply_len properly 17:18:06 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2800, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000100)={{0x6, @bcast}, [@rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default]}, 0x48) 17:18:06 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=[{0x10}], 0x10}}], 0x2, 0x0) 17:18:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f00000000c0), 0x0, r2, 0xf23cb4aa0038229}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0x480000000000485, 0x2000], [0xc1]}) 17:18:06 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:07 executing program 1: io_setup(0x8, &(0x7f0000000140)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') io_submit(r0, 0x1, &(0x7f0000002b80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="d8", 0x1}]) 17:18:07 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:07 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d3030303032303030303030302c00a50f1e4a31b16db423e4364213282a71cef90a985fad353589884b6fe0a62b6f75b8729758a1367a763866cfcc80d261aa7f86569d677d83b4a8009d96d858a8a5fc2810e8fb99e3cb0e5795a3f8c8a07115bebcfdedeeb4a00cd73d4e7ea8e91bcc33a24c98f0af34c1e77c9e1a68c15072cfdd5ce27a267886"]) 17:18:07 executing program 4: r0 = dup(0xffffffffffffffff) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0xf0ff7f) [ 201.707528] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 201.707528] program syz-executor.2 not setting count and/or reply_len properly 17:18:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f00004fd000), 0x4) r2 = socket$inet6(0xa, 0x2, 0x4000000000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) write$char_usb(r3, &(0x7f0000000140)="f0cf2351afd6557b4117486b0894220492decd13838f17697ee503049e0d95ac3e01bd80b88db6182a4c415f02c331ba13203e4b71ccbb756547dc1a8224d715334340c3df77a420ac63b7eb14faa1ca423bf91316c2f471f0ead79c580c9657a7d039ab07c3e6f640b30087110214a97014f921e469d1618a549b0d63388ced896741c6092957b9ea13369a1f4111bb4e5ec43548b125f5f5b6f93e7352a1108997bd645faf6ef4b2f02da2abb6d2c5", 0xb0) write$char_usb(r3, &(0x7f0000000200)="3d13f4fed8b6ed7e37a28bc75285e327ef6b97dd95bf030e542db8d2c5dd797a6051d713bf0cecb7175e8573d6348c0710acbc49faa087cd0473164ed44594b862c6abe403eb1e0aca03a241c5bb84a570cbc5fafa05851dda628a6ee8acdc5e4f0b012bfa6cfed32033a2efa0754d55b249a16236b045a5d2bb8c9ea64ad4d797860a6a1820da90e6576bfa28fd2b6083756bebbca6c6d89a09d30397182a9db7835628ab1d1eed8b33ff4117a1571567c35d638f020e", 0xb7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000282, 0x0) 17:18:07 executing program 3: socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:07 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) 17:18:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x10\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000800)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000006c0)=r0, 0x4) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x33, 'c\x86\xdd'}]}, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 201.948605] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 201.948605] program syz-executor.2 not setting count and/or reply_len properly 17:18:07 executing program 3: socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="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", 0xfc) 17:18:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) 17:18:07 executing program 3: socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="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", 0xfc) 17:18:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) [ 202.387501] device nr0 entered promiscuous mode 17:18:08 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x0) [ 202.431216] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 202.431216] program syz-executor.2 not setting count and/or reply_len properly 17:18:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clone(0x200000000a000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup(r1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'veth1\x00'}) r3 = syz_open_pts(0xffffffffffffffff, 0x40001) fcntl$setstatus(r3, 0x4, 0x102800) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) [ 202.622425] overlayfs: upper fs does not support tmpfile. [ 202.663428] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 202.691739] overlayfs: lowerdir is in-use as upperdir/workdir [ 202.749909] overlayfs: upper fs does not support tmpfile. [ 202.798890] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 202.829350] overlayfs: lowerdir is in-use as upperdir/workdir [ 203.067780] veth1: mtu less than device minimum 17:18:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="7f08040403400900ff0176d927b6e8c1fa9c00000000000100000000000000000000000000000000fe800000010000000000000000008b6d400900000000000000000000000000001b109e100d36f4b6e50a27962d9a9ff618fc879a96c8083d41809f026b57c7c41585b1a52208953df873177eec68d0d0928d981459890a6875ebff0b6b0d3e1e339107834edadee948a3953bb3c9b0cb7a4148d82d6dde42a6691e9cd8113b99722d6ba8dc2777245d0f039350f032ef401cff2fbe634a23d69e9a260f3f7edbc4fd960dff653e114adc8ddff334408d3662518d3c20f9aa16af83e90caf1f2e0c9b4811499715f52df247403a4445dba421643abca370988b83f603469c04abcc691a86b6631255dfa3c4ebfd2d52006b6ac2f77ca40be505733dfc5525f18aaac6a9ba26c1596369000080ffd851e684db7ac46d7fd28e"], 0x48) r1 = socket$inet(0x2, 0x4, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2}, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:18:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 17:18:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) [ 203.142276] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 203.142276] program syz-executor.2 not setting count and/or reply_len properly [ 203.215401] device nr0 entered promiscuous mode 17:18:09 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003ac0)={&(0x7f0000002680)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000003940)=[{&(0x7f00000026c0)="22328a9257b73cb18fbceb4e5032fa598e847eadf87df07489fab939e991f0fb85253cbbf4b036f19d628bf1e289b19165be7d5d9c8446c59ef9a10937a269e91551714bab5a7098277a2f390c8dda", 0x4f}, {&(0x7f0000002740)="a37f703cd568846e5a963c52b484d512bbd9402d2e2f2df15c3701", 0x1b}, {&(0x7f0000002780)="87537b830a671c306fab27f3486f24eba4c7863a48dea0ccce042cc7e9c922440d0ae296ae91e036473dbbf740486867a1a06d7a5008b43df76f080cef7c9e7f7e3c8048ef937805c8961b530fa1d72178dc74bc0edc3dab67e4177f03764f745ac6c59f69669e97c7216b6d6cc13f85996772b77bb734fa1d44bbcbd778aa5e2591b7c09f553cbd9a9c7baf41a45b59ef7c7e780efdfaecdbedd464f61aff209a444c2b7624396ac43683662567", 0xae}, {&(0x7f0000002840)="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", 0xd35}], 0x4}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x5, {{0xa, 0x4e22, 0x9, @loopback, 0x5cf7}}}, 0x88) 17:18:09 executing program 4: r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000535843331b53c0143cca276198120000000000000200000000000000000400000008000900000000000000000000000000f7ffffff5aaed0637f75ec48e0f995f6bc8d9fb5299c"]) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000080)={{0x1, 0x0, 0x40, 0x4, 0x7, 0x9}, 0xffffffff, 0xffffffffffff0001, 0x3, 0x10001, 0x653, "31a622a176dff6e41382ef779dd4a2b2615ea4445e1a7b82170fc117b3b0c62259d214262575bd142e6d907e7d2c8d232076280c9dfdc950daf5d6ee728ea9fb31fe130aa09e99e1db189c87bf60655afa970ad1cf3c59a997f47796f4e500cfe21cc4f8b1b40c410f18b99b5dec6c7abfb76d411d62ff16f665602b02527ce4"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x106c}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x48884}, 0x48841) 17:18:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 17:18:09 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfffffffffffffd68) socket$xdp(0x2c, 0x3, 0x0) 17:18:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380), 0x0) 17:18:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) setsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000180)="483bc3785e804ba418f646fd3f8e9e49c156cf0e820f9db657c881794d67eda2eb4caba15cd05af73dd55f934994d4ca3e7f349acd41abca78a458cbc606b48ea93ed64cb272869bc042924f62d6da04016c308056caae380b2451700b1e9db60c3f439cad86118e0bd403b6febcebdb7b319fae59f2dd36e7c1ec", 0x7b) io_submit(r1, 0x38, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xf00}]) 17:18:09 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "6cd8156f844e0102c8dd06da949c3b45"}, 0x18) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x440000, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101080, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000100)={0x3, 0x3ff}) 17:18:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 204.138288] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 204.138288] program syz-executor.2 not setting count and/or reply_len properly 17:18:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x48) r1 = socket$inet(0x2, 0x4, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2}, 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:18:10 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, 0x0, 0x0) 17:18:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380), 0x0) 17:18:10 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001840)='/dev/btrfs-control\x00', 0x400a02, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) io_setup(0x3ff, &(0x7f0000000080)=0x0) io_destroy(r1) io_setup(0x7, 0xfffffffffffffffe) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/135, 0x87}], 0x3, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/185, 0xb9}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/136, 0x88}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/34, 0x22}, {&(0x7f0000001740)=""/55, 0x37}], 0x9, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) 17:18:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380), 0x0) 17:18:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xebbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:18:10 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) fcntl$setstatus(r0, 0x4, 0x2400) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x5, 0x101, 0x4, {0x26d, 0x80, 0x6, 0x9}}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x9) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000b7f65ac74833908e803b1012ceb573e6a406cdeb4554430e89b604459a803a0eafc594b17a749af5a94e03432c4f60685e5e6bd81179e92f30cfb2152230cc9b8d900fb0598d83ce0ba38c71305aabc56ce9dc7539c77065a47b9d7803724101b60056246d82e6a186e116ac027359589d2fb2e5300ab2de312328c47a1a7fbb8b080b033195e171ea3288a3fec4c9d8ea4684d5e7cf011922d57561052d6a5c3aa3b9ce6862a0810050df6da574a5c1593d293a545c55b4155397c97ea5870379"], 0x18, 0x4800000000000000}}], 0x1, 0xc000) 17:18:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e) 17:18:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 205.005779] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 205.005779] program syz-executor.2 not setting count and/or reply_len properly 17:18:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") dup3(r1, r0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) 17:18:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e) [ 205.107407] 9pnet: Insufficient options for proto=fd 17:18:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x8, 0x4, 0x7, 0x0, 0x4, [{0x7f, 0x400, 0x200, 0x0, 0x0, 0x400}, {0x3a78, 0x800, 0x1, 0x0, 0x0, 0x1000}, {0x8, 0x13c, 0x7ff, 0x0, 0x0, 0x1980}, {0x6, 0x2b, 0x100000000, 0x0, 0x0, 0x200}]}) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x8, "f45678104b7de90352fe6b73ccce"}, 0xffffffffffffffd9, 0x0) 17:18:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$void(r0, 0xc0045c78) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x1d2, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="8fb4bacfee75861ba2e6dfcc2f81db8ea20f2fdf", @ANYRESDEC=r0, @ANYRESDEC=0x0]}, 0x1, 0x0, 0x0, 0x11}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0bba48ce51d49872d4dd4fbd739fc1bf00ca7d9309ea050008000000080004009fb6000081000500000800001c00020008000900f501000008000e004e200000cd9d6e14ff000000000036c085e24e9931b65906e584b0f022fd73fdc9d2d0661dd77db7bf289a00a2fd79820d37c6179ddb14db2598a8032e0d57863f55eb386d819ed47d"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x440d5) 17:18:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x4, 0xffffffff, 0xff}) 17:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9d", 0x7e) 17:18:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="71e67a15cd", 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0200000047a062c401c55ad5348d"], 0x0, 0xe}, 0x20) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000001480)={0x0, 0x0, 0x2080}) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0xde6, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0xfdef}]) [ 205.509846] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 205.509846] program syz-executor.2 not setting count and/or reply_len properly 17:18:11 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1b) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0)={0x1, 0x57b, 0x2, 0x8}, 0x6) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)={0x3ff, 0x4}) 17:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d", 0xbd) 17:18:11 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200101, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8080) io_submit(0x0, 0x5, &(0x7f0000001780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="ff1019cd9a596ebcb937277d5d87844609a9faa68c9f423fffe54befe1f0f1fbedf9e5480e9ec4906a2d7c86fd157ac35dfce6695a1e51a3472d7fa00e72612ed28d526a00f07d1e354f42cfdd9eb35d14d0ff21f0b9df9d74df6d999035f6cbe5910e1302a48e00cb3e666638ba16647d34726d316b64fbbd1fa84750b974514426f1231ad11d0ed487abeaebf3326e127b6d16ae2e783f0c930623508031b4251324c703971ee5592474aaa824d9315d520395", 0xb4, 0x7ff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x525a}, 0x0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0xd78, 0x0, 0x0, 0x0, r0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e978d2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 17:18:11 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0xff000000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r0 = getpgid(0xffffffffffffffff) setpriority(0x2, r0, 0x0) 17:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d", 0xbd) 17:18:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000a80)) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000001c0)=""/108, &(0x7f00000002c0)=0x6c) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r3, 0x3, 0x5e00, 0x0) preadv(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) fallocate(r2, 0x11, 0x2000, 0x9000000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0x0, 0x138, 0x380, 0x248, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x0, 0xfffffffffffffffb, 0x15f2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @gre_key=0x3, @gre_key}}}, {{@ipv6={@local, @remote, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0x3a1ca26099a53c35, 0xff000000, 0xffffffff], 'tunl0\x00', 'veth0\x00', {}, {0xff}, 0xff, 0xffffffffffffffe0, 0x5, 0x42}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x64}}}, {{@ipv6={@local, @empty, [0xff000000, 0xff, 0x0, 0xffffffff], [0xffffffff, 0xf9e9734753f5c2d3, 0xd0eb685edb835fd7, 0xffffff00], 'rose0\x00', 'ipddp0\x00', {0xff}, {0x437a292b5804bd4f}, 0x2c, 0x6, 0x4, 0x55}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0xffffffff, 0x100, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@rand_addr=0xe76, @ipv4=@loopback, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000145042, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b00)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000b40)={@dev, 0x0}, &(0x7f0000000b80)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000bc0)={@remote, @initdev, 0x0}, &(0x7f0000000c00)=0xc) accept$packet(r1, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000d80)={@local, @broadcast, 0x0}, &(0x7f0000000dc0)=0xc) getpeername$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000001040)=0xe8) accept$packet(r4, &(0x7f0000001080)={0x11, 0x0, 0x0}, &(0x7f00000010c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001100)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000001140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'teql0\x00', 0x0}) accept(r3, &(0x7f0000001200)=@hci={0x1f, 0x0}, &(0x7f0000001280)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000013c0)={0x0, @local, @remote}, &(0x7f0000001400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000014c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000015c0)=0xe8) getpeername$packet(r3, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001740)={0x0, @remote, @broadcast}, &(0x7f0000001780)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001800)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000001900)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003180)={'hsr0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000003a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000039c0)={&(0x7f00000031c0)=ANY=[@ANYBLOB="d8070000", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4802020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="08f9a2d4715364f5ff2f4c000716082672003c00010024f10000757365725f6c696e6b757000000000000000c900000000000000000000000800030006004a3f", @ANYRES32=r10, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r11, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r12, @ANYBLOB="84000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004000000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004003e58ffff080007000000000008000100", @ANYRES32=r14, @ANYBLOB="f000020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400730000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000008000100", @ANYRES32=r16, @ANYBLOB="44000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ffff000008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="4800020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004002903b3d86f000000000000000000000008000100", @ANYRES32=r19, @ANYBLOB="700102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400000100003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400c50b000008000100", @ANYRES32=r22, @ANYBLOB="bc00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="080007000000000008000100", @ANYRES32=r25, @ANYBLOB="cc0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x7d8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fbfffffc) 17:18:11 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x80000001}, 0x28, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fchown(r0, r2, r3) [ 205.754823] ptrace attach of "/root/syz-executor.1"[7871] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ /dev/sequencer2  €   fou H '  )½p ýÛß%   \x0a  \x07   \x0a     \x0a € H À \x0c   €  ÿÿÿÿ ÿÿÿÿ@ = 17:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d", 0xbd) 17:18:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}, [0xffffffffffffffa0, 0x19, 0x400, 0x3ff, 0x9, 0xaba9, 0x80000001, 0x2, 0x800, 0x3b, 0xb1, 0x5, 0x40000, 0x2, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000240)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) flistxattr(r3, &(0x7f0000000000)=""/29, 0x1d) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed67}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000780)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 205.964712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05", 0xdd) [ 206.049987] audit: type=1800 audit(1565630291.642:56): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16674 res=0 [ 206.132193] audit: type=1800 audit(1565630291.732:57): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16674 res=0 17:18:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 206.373036] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 206.373036] program syz-executor.2 not setting count and/or reply_len properly [ 206.402952] audit: type=1800 audit(1565630292.002:58): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16674 res=0 [ 206.451469] 9pnet: Insufficient options for proto=fd 17:18:12 executing program 4: r0 = socket(0x400000000010, 0x3, 0x0) lseek(r0, 0x0, 0x1) write(r0, &(0x7f0000000280)="2400000020002551075c1165ff0ffc020200000000100f0007e1000c0800170000000000", 0x2f) 17:18:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0xffffffffffffd155}, 0x1) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x8, @pix_mp={0x8000, 0xffffffffffff850f, 0x34324142, 0x5, 0xc, [{0x9, 0x6}, {0x1, 0x4}, {0x3f}, {0x4, 0x800}, {}, {0x4, 0x5612}, {0x100000001, 0x2}, {0x5, 0x5}], 0xf87, 0x2, 0x4, 0x1, 0x3dac3f4a00912779}}) open$dir(&(0x7f0000000040)='./file0\x00', 0x40400, 0x100) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1ae, 0x0) fsync(r0) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 17:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000200)={{0x1d, 0x6}, 'port0\x00', 0x2, 0x10, 0xfffffffffffffeff, 0x6, 0xfffffffffffffff8, 0x95, 0x4, 0x0, 0x2, 0x8}) 17:18:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05", 0xdd) 17:18:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:12 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@md5={0x1, "083b8e55460e138b085c60071dd94a87"}, 0x11, 0x2) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) [ 206.597122] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 206.597122] program syz-executor.2 not setting count and/or reply_len properly [ 206.633650] audit: type=1804 audit(1565630292.232:59): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir480648556/syzkaller.sRM8tN/43/file0" dev="sda1" ino=16677 res=1 [ 206.676196] 9pnet: Insufficient options for proto=fd 17:18:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0xfffffffffffffd5b) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x5, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000000000000000006815c32893a519bda6607e6d0761ec3666f9cdd2c684c37b0ced09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000140)=""/124, 0x41000, 0x2, [], r2, 0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x8}, 0x10}, 0x70) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000600)={'system_u:object_r:ptmx_t:s0', 0x20, 'unconfined_u\x00'}, 0x29) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=r2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000740)=0xe8) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000780)) 17:18:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05", 0xdd) [ 206.687361] audit: type=1804 audit(1565630292.262:60): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir480648556/syzkaller.sRM8tN/43/file0" dev="sda1" ino=16677 res=1 17:18:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80040, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$UHID_DESTROY(r3, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000240)="b5057018", 0x4) 17:18:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "03d8be87935a91374e94c2bfc6e909d8e578d2e5d8ae0e5500f7d071137955b3e08902ef37771bb473a44f2dfd8669e52807d55c13d91f9a9abf354a360968f4e9857249906ff820dfe33275af42348c285f181c19c7dc600f7138114649760de87c706c4722149b9ede455ee6de33cfefaf6070b3cb003113c27ca2bb7e719f9cb28fe6f63a9a47ffb7c233d8d0dbd3af504eedf197f0ca081444c57db5205202756362c5d8bd3360f9b8e73dd427b6a754723e9c81129b7483959a0625337f03d231fc358b32713ea6cd62bc9f232d4b8426eceb1a7070aee77d78c4248e6ba7005b28f512f4de5447ee7fe1ad1a64d2e7a81e4a8d3122858702afef22fbbc", 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x128) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/158) dup2(r2, r1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 206.773480] ALSA: seq fatal error: cannot create timer (-19) 17:18:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac", 0xed) [ 206.890241] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 206.890241] program syz-executor.2 not setting count and/or reply_len properly 17:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000200)={{0x1d, 0x6}, 'port0\x00', 0x2, 0x10, 0xfffffffffffffeff, 0x6, 0xfffffffffffffff8, 0x95, 0x4, 0x0, 0x2, 0x8}) 17:18:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4001, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10f0008) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000000200)={0x0, 0xf0ffffff00000000, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000c0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 207.044840] 9pnet: Insufficient options for proto=fd 17:18:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac", 0xed) 17:18:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x128) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/158) dup2(r2, r1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 207.117146] ALSA: seq fatal error: cannot create timer (-19) 17:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000200)={{0x1d, 0x6}, 'port0\x00', 0x2, 0x10, 0xfffffffffffffeff, 0x6, 0xfffffffffffffff8, 0x95, 0x4, 0x0, 0x2, 0x8}) [ 207.306110] sg_write: process 19 (kworker/1:0) changed security contexts after opening file descriptor, this is not allowed. [ 207.448137] ALSA: seq fatal error: cannot create timer (-19) 17:18:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x957a, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r2, 0x79, "3af646849f81596fe960f45e87747c8ab2d7ca2e50efcb08860d50cc107748bcf4fe658e8e95752ab32df1ae8419c2dcfc85a26f075d2c0cf4d4c406ef4991c61628537ee42c84a1756f495475fdc7f0426f5ff5d5d7736228441d95393e06f08929dbb7462d5746a7779aae8095751cdd9044d7bc82f5d074"}, &(0x7f0000000380)=0x81) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x2, 0x570b9570, 0x191d, 0xffffffff, 0x8, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0xfffffffffffff692, 0x6, 0x1, 0x100}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r3, 0x8000}, &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x800, 0xfffffffffffff91e, 0xf54, 0x100000000000000, 0xf, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000004c0)="1c0000001a009b8a14e5f46b000000ff00"/28, 0x1c) 17:18:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x2, 0xc) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x10000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x40, 0x8000, 0x7, 0x1f}, {0x8, 0x8, 0x100000001, 0x4}, {0x8, 0x4, 0xe7, 0x7fff}, {0xeed, 0x7, 0x1000000000000, 0x7}, {0x0, 0x3, 0x3, 0x9}, {0x100000001, 0x9960, 0x740, 0xfff}, {0x2, 0xfffffffffffffffa, 0xffffffff, 0x8}, {0x5, 0x3, 0x4, 0x3}]}) signalfd(r1, &(0x7f0000000100)={0x3}, 0x8) write(r1, &(0x7f00000012c0)="1f0000000107fffffd3b54c007110000f30501000b0007001a0000000000cf", 0x1f) 17:18:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac", 0xed) 17:18:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "03d8be87935a91374e94c2bfc6e909d8e578d2e5d8ae0e5500f7d071137955b3e08902ef37771bb473a44f2dfd8669e52807d55c13d91f9a9abf354a360968f4e9857249906ff820dfe33275af42348c285f181c19c7dc600f7138114649760de87c706c4722149b9ede455ee6de33cfefaf6070b3cb003113c27ca2bb7e719f9cb28fe6f63a9a47ffb7c233d8d0dbd3af504eedf197f0ca081444c57db5205202756362c5d8bd3360f9b8e73dd427b6a754723e9c81129b7483959a0625337f03d231fc358b32713ea6cd62bc9f232d4b8426eceb1a7070aee77d78c4248e6ba7005b28f512f4de5447ee7fe1ad1a64d2e7a81e4a8d3122858702afef22fbbc", 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x128) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000100)=""/158) dup2(r2, r1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 17:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000200)={{0x1d, 0x6}, 'port0\x00', 0x2, 0x10, 0xfffffffffffffeff, 0x6, 0xfffffffffffffff8, 0x95, 0x4, 0x0, 0x2, 0x8}) [ 207.731935] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. [ 207.765477] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 17:18:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd30001", 0xf5) 17:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 207.792404] ALSA: seq fatal error: cannot create timer (-19) 17:18:13 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:18:13 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01a490887cf3"], 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000000}) ftruncate(r0, 0x6) 17:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:13 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x1000, 0x800}, &(0x7f00000000c0)=0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x103000, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000140)) 17:18:13 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @empty=[0xa], [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x240c00, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x7fffffff, 0x3}) 17:18:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd30001", 0xf5) [ 208.115106] 9pnet: Insufficient options for proto=fd [ 208.134339] ALSA: seq fatal error: cannot create timer (-19) 17:18:13 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:18:13 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8c", 0x1, 0x8000, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x4a47, 0x2000000000}]}, 0xc, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) io_setup(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@null=' \x00', 0xa, 'hsr0\x00'}) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0), 0x4000000000002e5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}], 0x492492492492556, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 17:18:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7, 0xb000}, 0xffffff08) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0xcf, 0x3, 0x9}, 0x10) recvmmsg(r1, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) 17:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd30001", 0xf5) 17:18:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/policy\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000001d000000000000001d0676657468305f746f5f627269646765006e7230000000000000000000000000006772653000000000000000000000000076657468315f746f5f626f6e64000000aaaaaaaaaaaa000000000000aaaaaaaaaaaa00000000000000007000000070000000a80000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000feffffff0000000009000000000000000000697064647030000000000000000000006272696467655f736c6176655f3100000000000000000000000000000000000067726530000000000000000000000000ffffffffffff0000000000000000000000000000000000000000e000000018010000500100007261746565737400000000000000000000000000000000000000000000000000480000000000000064756d6d79300000000000000000000073797a5f74756e0000000000000000002c000009000000000000000000000000200000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff01000000110000000000000000006272696467655f736c6176655f310000000000000000000000000000000000006c6f00000000000000000000000000000080616d300000000000000000000000aaaaaaaaaa00000000000000aaaaaaaaaaaa0000000000000000a00000000801000040010000636f6e6e6c6162656c000000000000000000000000000000000000000000000008000000000000000000000000000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000000000000000000736e617400000000000000000000000000000000000000000001000000000000100000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb00"/968]}, 0x440) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2, 0x0) [ 208.327868] 9pnet: Insufficient options for proto=fd 17:18:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8", 0xf9) 17:18:14 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 208.401937] protocol 88fb is buggy, dev hsr_slave_0 [ 208.407112] protocol 88fb is buggy, dev hsr_slave_1 [ 208.473612] ALSA: seq fatal error: cannot create timer (-19) [ 208.520840] 9pnet: Insufficient options for proto=fd 17:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8", 0xf9) 17:18:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80901) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x7fffffff, 0xdcc5}, 'port0\x00', 0x80, 0x10400, 0x4, 0x0, 0x4, 0x7d00, 0x401, 0x0, 0x4, 0x9f6}) ioctl(r0, 0x1, &(0x7f00000000c0)="11b3d6d9acd620ce6b8faf") r2 = socket$inet(0x2, 0x2800080001, 0x84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x36ba, 0x3}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='sit0\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r3) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0xac141423}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x29fcc}], 0x1}, 0x0) 17:18:14 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009371, &(0x7f0000000000)="010000000000000018") [ 208.750205] 9pnet: Insufficient options for proto=fd 17:18:14 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8c", 0x1, 0x8000, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x4a47, 0x2000000000}]}, 0xc, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) io_setup(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@null=' \x00', 0xa, 'hsr0\x00'}) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0), 0x4000000000002e5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}], 0x492492492492556, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 17:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8", 0xf9) 17:18:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$TIOCSTI(r1, 0x5412, 0xf9) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 17:18:14 executing program 5: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0xa0) umount2(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) [ 209.173444] 9pnet: Insufficient options for proto=fd 17:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfb) 17:18:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xfffffdba}, 0xb) fallocate(r1, 0x0, 0x0, 0xfff) fallocate(r0, 0x0, 0x0, 0x10fffd) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) fallocate(r1, 0x13, 0x1000, 0x8) 17:18:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a", 0xfb) [ 209.384530] 9pnet: Insufficient options for proto=fd 17:18:15 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8c", 0x1, 0x8000, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x4a47, 0x2000000000}]}, 0xc, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) io_setup(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@null=' \x00', 0xa, 'hsr0\x00'}) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0), 0x4000000000002e5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}], 0x492492492492556, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 17:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 209.505086] audit: type=1800 audit(1565630295.102:61): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16577 res=0 17:18:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x6f7b117caf19afa7) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @rand_addr=0x4}, 0x29}}, 0x0, 0x0, 0xa00, 0x0, 0x1000000000054}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x3, 0x2ea5eb2a74a9485a, 0x386}, &(0x7f00000000c0)=0x18) 17:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 209.813197] sctp: [Deprecated]: syz-executor.5 (pid 9220) Use of int in maxseg socket option. [ 209.813197] Use struct sctp_assoc_value instead 17:18:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x6f7b117caf19afa7) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @rand_addr=0x4}, 0x29}}, 0x0, 0x0, 0xa00, 0x0, 0x1000000000054}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x3, 0x2ea5eb2a74a9485a, 0x386}, &(0x7f00000000c0)=0x18) 17:18:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfb) 17:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = msgget(0x2, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000001c0)=""/32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:15 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8c", 0x1, 0x8000, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x4a47, 0x2000000000}]}, 0xc, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) io_setup(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@null=' \x00', 0xa, 'hsr0\x00'}) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0), 0x4000000000002e5, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004e00)=[{0x0, 0x36b, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}], 0x492492492492556, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 17:18:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x6f7b117caf19afa7) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @rand_addr=0x4}, 0x29}}, 0x0, 0x0, 0xa00, 0x0, 0x1000000000054}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x3, 0x2ea5eb2a74a9485a, 0x386}, &(0x7f00000000c0)=0x18) [ 209.983860] audit: type=1800 audit(1565630295.582:62): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16695 res=0 17:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") msgget(0x2, 0x8) r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:15 executing program 3 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 210.280404] sctp: [Deprecated]: syz-executor.5 (pid 9242) Use of int in maxseg socket option. [ 210.280404] Use struct sctp_assoc_value instead [ 210.290622] sctp: [Deprecated]: syz-executor.0 (pid 9244) Use of int in maxseg socket option. [ 210.290622] Use struct sctp_assoc_value instead 17:18:15 executing program 4: r0 = socket(0x8, 0xf, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffe1e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000240)={0x0, 0x5}) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="eb62a7707dc80c9cb0e3a2be0000d0af", 0x10) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@dev, @multicast2}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=0x0]]) [ 210.330508] FAULT_INJECTION: forcing a failure. [ 210.330508] name failslab, interval 1, probability 0, space 0, times 1 [ 210.363078] ALSA: seq fatal error: cannot create timer (-19) [ 210.377725] CPU: 0 PID: 9259 Comm: syz-executor.3 Not tainted 4.19.66 #40 [ 210.384698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.394189] Call Trace: [ 210.396892] dump_stack+0x172/0x1f0 [ 210.400673] should_fail.cold+0xa/0x1b [ 210.404588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 210.409841] ? lock_downgrade+0x810/0x810 [ 210.414050] __should_failslab+0x121/0x190 [ 210.418311] should_failslab+0x9/0x14 [ 210.422179] kmem_cache_alloc_node+0x26c/0x710 [ 210.426830] __alloc_skb+0xd5/0x5f0 17:18:16 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 210.430486] ? skb_scrub_packet+0x490/0x490 [ 210.434846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.440513] ? netlink_autobind.isra.0+0x228/0x310 [ 210.445560] netlink_sendmsg+0x97b/0xd70 [ 210.449643] ? netlink_unicast+0x720/0x720 [ 210.453922] ? selinux_socket_sendmsg+0x36/0x40 [ 210.458620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.464176] ? security_socket_sendmsg+0x8d/0xc0 [ 210.468951] ? netlink_unicast+0x720/0x720 [ 210.473206] sock_sendmsg+0xd7/0x130 [ 210.477050] sock_write_iter+0x27c/0x3e0 [ 210.481139] ? sock_sendmsg+0x130/0x130 [ 210.485143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.490696] ? iov_iter_init+0xc6/0x1f0 [ 210.494704] __vfs_write+0x587/0x810 [ 210.498440] ? kernel_read+0x120/0x120 [ 210.502363] ? selinux_file_permission+0x92/0x550 [ 210.507225] ? security_file_permission+0x89/0x230 [ 210.512177] ? rw_verify_area+0x118/0x360 [ 210.516776] vfs_write+0x20c/0x560 [ 210.520340] ksys_write+0x14f/0x2d0 [ 210.524003] ? __ia32_sys_read+0xb0/0xb0 17:18:16 executing program 5: r0 = socket$inet(0x2, 0x80002, 0x2200000088) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r0, &(0x7f0000007840)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000001280)={0x18, 0x71, 0x1, {{0xa1, 0x2, 0x7}, 0x41}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f0000000100)="f3c8bef13073b278038d46ff096d67ce4a77bde69043ee43f733c45fcca6830026f40d9638e78456d76f24eeb31b6a6d06d1eca0c23544cef97d404a160a7e6c5ef31d8b2b", 0x45, 0x0, 0x0, 0x229) [ 210.528097] ? do_syscall_64+0x26/0x620 [ 210.532099] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.537507] ? do_syscall_64+0x26/0x620 [ 210.541506] __x64_sys_write+0x73/0xb0 [ 210.545420] do_syscall_64+0xfd/0x620 [ 210.549247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.554459] RIP: 0033:0x459829 [ 210.557667] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") ioctl(r0, 0x1000008912, &(0x7f0000000180)="11080000000bcfa2e1c1364c03efd585c022fee978e47bf070") r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 210.557676] RSP: 002b:00007f3bc1996c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.557716] RAX: ffffffffffffffda RBX: 00007f3bc1996c90 RCX: 0000000000459829 [ 210.591729] RDX: 00000000000000fc RSI: 0000000020000380 RDI: 0000000000000003 [ 210.599013] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 210.606314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3bc19976d4 [ 210.614290] R13: 00000000004c5db7 R14: 00000000004e0210 R15: 0000000000000004 17:18:16 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1e7acd1265e381a1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000020", @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf250b0000006c00030014000200626f6e643000000000000000000000001400020068737230000000000000000000000000080007004e240000140006007c7501bab32205964cb90d2445d4dfa10800040008000000080008000700000014000600fe8000000000000000000000000000bb080004000400000008000500ffffffff0800060004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x8840) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xe6, r3, 0x401}, 0x1c}}, 0x10000) [ 210.658447] IPVS: ftp: loaded support on port[0] = 21 [ 210.734241] audit: type=1400 audit(1565630296.322:63): avc: denied { write } for pid=9265 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 210.756340] ALSA: seq fatal error: cannot create timer (-19) 17:18:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:16 executing program 3 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400000, &(0x7f0000000000)="c3dbf2a61bfd14d01254d27f9f577bf97563bded437391b1d44276bb64eaa3ff46490b68884aeb155972380790d54c9f7df83cbdd28b749b35e562b05be10a5f") r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1d9, 0x2], [0xc1]}) 17:18:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 210.997912] ALSA: seq fatal error: cannot create timer (-19) [ 211.047569] IPVS: ftp: loaded support on port[0] = 21 17:18:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 211.217437] ALSA: seq fatal error: cannot create timer (-19) 17:18:18 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002340)="2400000001021f001cfffd946fa28300965eba800200010003e7000000018d4d1a84fe45", 0x24}], 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) 17:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:18 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x7, 0x4}, {0xb, 0x2}, {0xd, 0x2}, {0x8, 0x1}, {0x5, 0x1}, {0x5}, {0xc, 0x2}, {0xb, 0x5}, {0x2}]}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @union={0xf, 0x8, 0x0, 0x5, 0x506, 0x1, [{0xb, 0x2, 0xffffffff}, {0xe, 0x4, 0x2}, {0xd, 0x3}, {0xf, 0x2, 0x9}, {0x4, 0x2, 0x3429}, {0x5, 0x2, 0x1}, {0xe, 0x4, 0xf9d}, {0x3, 0x0, 0x8001}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @fwd={0xe}, @ptr={0xc}]}, {0x0, [0x30, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/57, 0x12f, 0x39, 0x1}, 0x20) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4004, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) clone(0x80000400, &(0x7f00000001c0)="d090c8e92dd8cd717cd92f4ea60129b9ff166c516428ffbbb0d5c4eefaaec28dc2fa90b2ecf162c2f473d7c7be6e13d7b7251389a4d663e1f4a3d3246cccb66199244cffd964acce867afa2a2b1451607c3152933305d54ddd2b61ba9fe6785defc0f8fbfc4b33ab351902d6d49a85d71629a0ed7a8c63455e50cc677a5db69b9f6e6b7b807a75b7af4e52cc00fab4bed3dbf98c4641241e5697457a382e", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="124a562136ec05ee9d62706547d08423391a505fabe917c36df5dcf85c2b988c65b99a0f0e0f98fb8a4ee9bddb3b54560fbfff06e8a9457def3036cc60e00533acc9dee790abd2bf55752717591105fcf6e85b738804feddef26366699d6cfa84611021e899bc2952c98ac5404b6c45702fcf0e7ef2aa7c658360a9f13f6ee6480c89e98cf505de9f93d634bb348a622033b19d12d56cac4178ee752c579adbd8bf45917b0754b2559ec1f7e5c73ef6e266480cb41ecb252cc02f465a8dc05a8710c9c89459f369c7175ac6a31b0a0129b") socket$rxrpc(0x21, 0x2, 0xa) mkdir(0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="dcf0ffff"], &(0x7f0000000500)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) timer_create(0x0, 0x0, 0x0) unshare(0x40000000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000400)=""/148) 17:18:18 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 213.035384] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.069458] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="100000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 213.109748] ALSA: seq fatal error: cannot create timer (-19) 17:18:18 executing program 1: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:18 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 213.258759] IPVS: ftp: loaded support on port[0] = 21 17:18:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="1b0000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 213.478083] IPVS: ftp: loaded support on port[0] = 21 [ 213.584717] IPVS: ftp: loaded support on port[0] = 21 17:18:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x40000) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x8, 0xffff, 0x10001, 0x6, 0xffffffffffffffff}, 0x5a0b}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967481241fa69e5e2b13058d818ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba6460b388673786b44280ab828131ef6a78f9c5205360b911c2a3db1896d912bf874eb536f700040000000000002e4fef2b38a1a27999a981711b8cce6e317f983d0dfa19e3804a5a2e798f30b73d8b22831d38aca10a36342e13cbd486861b988ea94e335a75", 0xffffffffffffff8b, 0x10ad0, 0x0, 0x4a) 17:18:19 executing program 1: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100), 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:19 executing program 1: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 214.009537] IPVS: ftp: loaded support on port[0] = 21 17:18:21 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x43b) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 17:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100), 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:21 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x226, 0x200000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 17:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100), 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-generic)\x00'}, 0x58) gettid() r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000002c0)='stat\x00') ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) r4 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000300)='/dev/usbmon0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x978}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x67b, 0x4, 0x8000, 0xcc0, 0x7f, 0x5121, 0x1, 0x1, r5}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="f2c8068197deb745009674816cf867de69b22684b9298f807fcd96ee3fd512a644e73f1301bfa25a0fa8ba", 0x2b) [ 215.556791] IPVS: ftp: loaded support on port[0] = 21 17:18:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="effd00001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) fcntl$setlease(r1, 0x400, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2008000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100), 0xfe20) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000040), 0x4) 17:18:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0x201, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000002c0)={0x21, @empty, 0x4e22, 0x4, 'dh\x00', 0x11, 0x7, 0x6f}, 0x2c) r3 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='TIPCv2\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r3, &(0x7f00000001c0)=""/242, 0xf2) [ 216.020822] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 216.085535] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 17:18:21 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="7c0400201a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0x201, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000002c0)={0x21, @empty, 0x4e22, 0x4, 'dh\x00', 0x11, 0x7, 0x6f}, 0x2c) r3 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='TIPCv2\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r3, &(0x7f00000001c0)=""/242, 0xf2) 17:18:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 216.301596] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 216.367971] IPVS: ftp: loaded support on port[0] = 21 17:18:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') exit(0x0) inotify_init() getdents64(r0, 0x0, 0x3b9) 17:18:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0000000f000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501000000000177000001004100000003001700000000000000006574683a0a7863616e310000"], 0x34}}, 0x0) [ 216.599028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=9468 comm=syz-executor.3 17:18:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:22 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf8779", 0x36) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:22 executing program 0: r0 = socket$inet(0x2, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @local}, {0x6, @broadcast}, 0x40, {0x2, 0x4e21, @local}, 'caif0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='nv\x00', 0x3) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="50375561bfba27d3f064d693e86d743a1a9cfe651d0a9acd91", 0x19, 0x50, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 216.806822] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:22 executing program 0: setrlimit(0x2, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init() ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x7fffffff, 0x62, "f3d0bb5a213dd87009a6b3dfebe2b37a8f6f7b1100ba770d72174afabdb1fce6d38d513a8a189e241b01252a8081fb45c9ac8b0801e38658e58a0228a4f285c0d69177514ee1eceb54c8b8a3525b517e24d54578f9bbd61efa0adbccd411477e8132"}) [ 216.853540] sg_write: data in/out 167162/6 bytes for SCSI command 0xff-- guessing data in; [ 216.853540] program syz-executor.2 not setting count and/or reply_len properly [ 216.888406] IPVS: ftp: loaded support on port[0] = 21 [ 216.965229] mmap: syz-executor.0 (9495): VmData 18661376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 17:18:23 executing program 5: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)={0x9, 0x1, "93"}, 0x2efe) 17:18:23 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, 0x0) [ 217.508339] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x5, 0x5, 0x10, &(0x7f0000ffc000/0x1000)=nil, 0x7}) [ 217.659384] IPVS: ftp: loaded support on port[0] = 21 [ 217.679297] IPVS: ftp: loaded support on port[0] = 21 17:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, 0x0) [ 217.701384] ion_buffer_destroy: buffer still mapped in the kernel 17:18:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4cdd7f0024e6a0a27a71dd"], 0x0, 0x12}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2, 0x4, 0x7fff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x4}, &(0x7f00000001c0)=0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000003c0)) [ 217.777362] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc00000013000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 218.008867] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:23 executing program 5: r0 = gettid() ioprio_set$pid(0x1, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x9d) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x3}, 0x1c) 17:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, 0x0) 17:18:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:23 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f00000025c0)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd74, &(0x7f0000000180), 0x100000e4}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000001380)=""/168, 0xa8}, 0x5}, {{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001440)=""/62, 0x3e}, {0x0}, {&(0x7f0000001600)=""/71, 0x47}, {&(0x7f00000016c0)=""/224, 0xe0}, {0x0}, {&(0x7f00000018c0)=""/94, 0x5e}], 0x6, &(0x7f0000001a00)=""/118, 0x76}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/74, 0x4a}], 0x1}, 0x20}, {{&(0x7f0000001ec0)=@can, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffeee}}], 0x4, 0x10100, &(0x7f00000023c0)={0x0, 0x1c9c380}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:18:23 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 218.263461] IPVS: ftp: loaded support on port[0] = 21 17:18:23 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x364, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044308, &(0x7f0000000080)={0x200, 0x0}) [ 218.310714] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.331056] ALSA: seq fatal error: cannot create timer (-22) 17:18:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x5, 0x200080) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000340)={0x2, 0x3}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = dup3(r1, r1, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x7, @local, 0x3f}, {0xa, 0x4e24, 0x400, @ipv4={[], [], @empty}}, 0x4, [0x4, 0x7fffffff, 0x8, 0x3, 0x8, 0x1bf, 0x0, 0x9]}, 0x5c) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x2c, 0x4) connect$inet(r1, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="09d57b0000000c47e7f5ea6f881aafe376620e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x28) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r1, 0x0, 0xb, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="0332175a1628fa88919aed849f2eb6c1fbfa65a5fd80d0dc2ce30e82c4e63eb85ffb5ee4829ff377d0997849f8e96ad4ff1de145b4c3f7b99599ac175421f8718d6d92cd296a601ae729a92967c21005150a8a3a97d8ba65eb4facae378d8c57415dc65cfdd459", 0x67, 0x810, &(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x4}, 0x10) 17:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 218.527506] ALSA: seq fatal error: cannot create timer (-22) 17:18:24 executing program 0: r0 = socket$kcm(0x10, 0x25, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a78022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 17:18:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000002280)=[{&(0x7f0000000100)="bd", 0x1}], 0x1, 0x0) [ 218.634145] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:24 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000000000400201) syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400040401006b010270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 17:18:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffc, 0x204100) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0xa00, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8800) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0xffffffffffffff6f, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8001) [ 218.865219] ALSA: seq fatal error: cannot create timer (-22) 17:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 218.915646] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 17:18:24 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 219.003096] FAT-fs (loop5): bogus number of directory entries (513) [ 219.022743] FAT-fs (loop5): Can't find a valid FAT filesystem [ 219.063259] IPVS: ftp: loaded support on port[0] = 21 [ 219.119439] FAT-fs (loop5): bogus number of directory entries (513) 17:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd", 0x32) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 219.160557] FAT-fs (loop5): Can't find a valid FAT filesystem 17:18:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:24 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 219.304024] IPVS: ftp: loaded support on port[0] = 21 [ 219.321455] sg_write: data in/out 167162/2 bytes for SCSI command 0xff-- guessing data in; [ 219.321455] program syz-executor.2 not setting count and/or reply_len properly [ 219.408416] FAULT_INJECTION: forcing a failure. [ 219.408416] name failslab, interval 1, probability 0, space 0, times 0 [ 219.438130] CPU: 0 PID: 9646 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 219.445143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.454522] Call Trace: [ 219.454566] dump_stack+0x172/0x1f0 [ 219.454590] should_fail.cold+0xa/0x1b [ 219.454610] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.454626] ? lock_downgrade+0x810/0x810 [ 219.454652] __should_failslab+0x121/0x190 [ 219.454672] should_failslab+0x9/0x14 [ 219.454694] kmem_cache_alloc_trace+0x2cc/0x760 [ 219.454722] __request_module+0x327/0xb84 [ 219.454764] ? snd_timer_open+0x12b3/0x1760 [ 219.454784] ? free_modprobe_argv+0xa0/0xa0 [ 219.454805] ? lock_downgrade+0x810/0x810 [ 219.478641] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 219.478664] ? wait_for_completion+0x440/0x440 [ 219.478683] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 219.478706] snd_timer_open+0x12b3/0x1760 [ 219.487240] snd_seq_timer_open+0x240/0x580 [ 219.495703] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 219.495719] ? mark_held_locks+0xb1/0x100 [ 219.495737] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 219.495748] ? queueptr+0x99/0xb0 [ 219.495765] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 219.513731] ? lockdep_hardirqs_on+0x415/0x5d0 [ 219.513751] ? ksm_scan_thread+0x10b0/0x4380 [ 219.513771] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 219.531989] snd_seq_queue_timer_open+0x51/0xc0 [ 219.532015] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 219.532034] snd_seq_ioctl+0x21f/0x400 [ 219.532050] ? snd_seq_open+0x5b0/0x5b0 [ 219.532086] ? __might_sleep+0x95/0x190 [ 219.532105] ? snd_seq_open+0x5b0/0x5b0 [ 219.541395] do_vfs_ioctl+0xd5f/0x1380 [ 219.541417] ? selinux_file_ioctl+0x46f/0x5e0 [ 219.554567] ? selinux_file_ioctl+0x125/0x5e0 [ 219.554589] ? ioctl_preallocate+0x210/0x210 [ 219.554603] ? selinux_file_mprotect+0x620/0x620 [ 219.554630] ? iterate_fd+0x360/0x360 [ 219.568852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 219.568870] ? fput+0x128/0x1a0 [ 219.568889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.586389] ? security_file_ioctl+0x8d/0xc0 [ 219.586411] ksys_ioctl+0xab/0xd0 [ 219.586431] __x64_sys_ioctl+0x73/0xb0 [ 219.586450] do_syscall_64+0xfd/0x620 [ 219.586470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.586487] RIP: 0033:0x459829 [ 219.603573] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.603582] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.603597] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 219.603605] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 219.603612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.603621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 219.603628] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 [ 219.740772] ALSA: seq fatal error: cannot create timer (-19) 17:18:25 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:25 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 219.918312] FAULT_INJECTION: forcing a failure. [ 219.918312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 219.930223] CPU: 1 PID: 9657 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 219.937292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.946785] Call Trace: [ 219.949511] dump_stack+0x172/0x1f0 [ 219.953169] should_fail.cold+0xa/0x1b [ 219.957072] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.962192] ? mark_held_locks+0x100/0x100 [ 219.966483] __alloc_pages_nodemask+0x1ee/0x750 [ 219.971181] ? __alloc_pages_slowpath+0x2870/0x2870 [ 219.976240] cache_grow_begin+0x91/0x8c0 [ 219.980333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.986198] ? check_preemption_disabled+0x48/0x290 [ 219.991248] kmem_cache_alloc_trace+0x685/0x760 [ 219.995964] __request_module+0x327/0xb84 [ 220.000165] ? snd_timer_open+0x12b3/0x1760 [ 220.004518] ? free_modprobe_argv+0xa0/0xa0 [ 220.008982] ? lock_downgrade+0x810/0x810 [ 220.013253] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 220.018160] ? wait_for_completion+0x440/0x440 [ 220.022774] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 220.027848] snd_timer_open+0x12b3/0x1760 [ 220.032296] snd_seq_timer_open+0x240/0x580 [ 220.039295] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 220.044000] ? mark_held_locks+0xb1/0x100 [ 220.048181] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 220.053333] ? queueptr+0x99/0xb0 [ 220.057164] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 220.062289] ? lockdep_hardirqs_on+0x415/0x5d0 [ 220.066906] ? ksm_scan_thread+0x10b0/0x4380 [ 220.071337] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 220.077346] snd_seq_queue_timer_open+0x51/0xc0 [ 220.082492] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 220.087823] snd_seq_ioctl+0x21f/0x400 [ 220.092202] ? snd_seq_open+0x5b0/0x5b0 [ 220.096436] ? __might_sleep+0x95/0x190 [ 220.100795] ? snd_seq_open+0x5b0/0x5b0 [ 220.104809] do_vfs_ioctl+0xd5f/0x1380 [ 220.108743] ? selinux_file_ioctl+0x46f/0x5e0 [ 220.113266] ? selinux_file_ioctl+0x125/0x5e0 [ 220.117892] ? ioctl_preallocate+0x210/0x210 [ 220.122324] ? selinux_file_mprotect+0x620/0x620 [ 220.127117] ? iterate_fd+0x360/0x360 [ 220.130945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 220.136510] ? fput+0x128/0x1a0 [ 220.139991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.145555] ? security_file_ioctl+0x8d/0xc0 [ 220.149985] ksys_ioctl+0xab/0xd0 [ 220.153480] __x64_sys_ioctl+0x73/0xb0 [ 220.157389] do_syscall_64+0xfd/0x620 [ 220.161210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.166404] RIP: 0033:0x459829 [ 220.169612] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.188799] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.196543] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 220.203830] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 220.211117] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:18:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 220.218408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 220.225697] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 17:18:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 220.289736] IPVS: ftp: loaded support on port[0] = 21 [ 220.486037] ALSA: seq fatal error: cannot create timer (-19) 17:18:27 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:27 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:27 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:27 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 221.512494] FAULT_INJECTION: forcing a failure. [ 221.512494] name failslab, interval 1, probability 0, space 0, times 0 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0500001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 221.597476] IPVS: ftp: loaded support on port[0] = 21 [ 221.607341] IPVS: ftp: loaded support on port[0] = 21 [ 221.631570] CPU: 0 PID: 9681 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 221.638568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.647951] Call Trace: [ 221.650706] dump_stack+0x172/0x1f0 [ 221.654371] should_fail.cold+0xa/0x1b [ 221.658296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 221.663424] ? lock_downgrade+0x810/0x810 [ 221.663450] __should_failslab+0x121/0x190 [ 221.663468] should_failslab+0x9/0x14 [ 221.663483] kmem_cache_alloc_trace+0x2cc/0x760 [ 221.663515] ? rcu_read_lock_sched_held+0x110/0x130 [ 221.663533] ? __kmalloc_track_caller+0x5dd/0x750 [ 221.690727] ? rcu_read_lock_sched_held+0x110/0x130 [ 221.690756] call_usermodehelper_setup+0x7b/0x2e0 [ 221.690771] ? memcpy+0x46/0x50 [ 221.690786] ? dec_ucount+0x250/0x250 [ 221.690805] __request_module+0x440/0xb84 [ 221.690826] ? snd_timer_open+0x12b3/0x1760 [ 221.716931] ? free_modprobe_argv+0xa0/0xa0 [ 221.721274] ? lock_downgrade+0x810/0x810 [ 221.721309] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 221.721326] ? wait_for_completion+0x440/0x440 [ 221.721345] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 221.721368] snd_timer_open+0x12b3/0x1760 [ 221.734950] snd_seq_timer_open+0x240/0x580 [ 221.734969] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 221.753172] ? mark_held_locks+0xb1/0x100 [ 221.757351] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 221.762467] ? queueptr+0x99/0xb0 [ 221.762482] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 221.762498] ? lockdep_hardirqs_on+0x415/0x5d0 [ 221.762514] ? ksm_scan_thread+0x10b0/0x4380 [ 221.762530] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 221.762549] snd_seq_queue_timer_open+0x51/0xc0 [ 221.762570] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 221.762588] snd_seq_ioctl+0x21f/0x400 [ 221.785421] ? snd_seq_open+0x5b0/0x5b0 [ 221.785460] ? __might_sleep+0x95/0x190 [ 221.785478] ? snd_seq_open+0x5b0/0x5b0 [ 221.795531] do_vfs_ioctl+0xd5f/0x1380 [ 221.795548] ? selinux_file_ioctl+0x46f/0x5e0 [ 221.795562] ? selinux_file_ioctl+0x125/0x5e0 [ 221.795577] ? ioctl_preallocate+0x210/0x210 [ 221.795594] ? selinux_file_mprotect+0x620/0x620 [ 221.811436] ? iterate_fd+0x360/0x360 [ 221.811457] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 221.811471] ? fput+0x128/0x1a0 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 221.811490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.811505] ? security_file_ioctl+0x8d/0xc0 [ 221.811522] ksys_ioctl+0xab/0xd0 [ 221.824622] __x64_sys_ioctl+0x73/0xb0 [ 221.824644] do_syscall_64+0xfd/0x620 [ 221.824664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.833949] RIP: 0033:0x459829 [ 221.833967] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 221.833974] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.833989] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 221.833996] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 221.834004] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.834011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 221.834020] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 [ 221.910410] ALSA: seq fatal error: cannot create timer (-19) 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 221.954896] IPVS: ftp: loaded support on port[0] = 21 17:18:27 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r3, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/94, 0x5e}], 0x6, &(0x7f00000009c0)=""/202, 0xca}, 0x9}, {{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001000)=[{0x0}, {&(0x7f0000000b80)=""/163, 0xa3}, {0x0}, {&(0x7f00000013c0)=""/220, 0xdc}], 0x4, &(0x7f00000012c0)=""/161, 0xa1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000e80)=""/14, 0xe}, {&(0x7f0000001540)=""/241, 0xf1}, {&(0x7f0000001640)=""/24, 0x18}, {&(0x7f00000016c0)=""/5, 0x5}, {&(0x7f0000001700)=""/230, 0xe6}, {&(0x7f0000001800)=""/100, 0x64}, {0x0}, {&(0x7f0000001980)=""/120, 0x78}, {&(0x7f0000001a00)=""/26, 0x1a}], 0x9}, 0x9}, {{&(0x7f0000001b00)=@in6, 0x80, &(0x7f00000020c0)=[{0x0}], 0x1, &(0x7f0000002140)=""/163, 0xa3}}, {{0x0, 0x0, &(0x7f00000054c0)}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}, 0x1}], 0x8, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffdd8) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 17:18:27 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:27 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0900001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:27 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 222.443069] ALSA: seq fatal error: cannot create timer (-19) [ 222.477724] FAULT_INJECTION: forcing a failure. [ 222.477724] name failslab, interval 1, probability 0, space 0, times 0 [ 222.508288] IPVS: ftp: loaded support on port[0] = 21 17:18:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 222.535212] IPVS: ftp: loaded support on port[0] = 21 [ 222.554907] CPU: 1 PID: 9720 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 222.561906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.571282] Call Trace: [ 222.573929] dump_stack+0x172/0x1f0 [ 222.577591] should_fail.cold+0xa/0x1b [ 222.581504] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 222.586636] ? lock_downgrade+0x810/0x810 [ 222.590830] __should_failslab+0x121/0x190 [ 222.595119] should_failslab+0x9/0x14 [ 222.598950] kmem_cache_alloc_trace+0x2cc/0x760 [ 222.603644] ? vprintk_default+0x28/0x30 [ 222.607744] snd_timer_instance_new+0x4f/0x3d0 [ 222.612372] snd_timer_open+0x8a7/0x1760 [ 222.616556] snd_seq_timer_open+0x240/0x580 [ 222.620900] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 222.625585] ? mark_held_locks+0xb1/0x100 [ 222.629833] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 222.634983] ? snd_seq_timer_defaults+0x389/0x470 [ 222.640472] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 222.646264] ? lockdep_hardirqs_on+0x415/0x5d0 [ 222.650882] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 222.656125] snd_seq_queue_timer_open+0xa3/0xc0 [ 222.660829] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 222.666149] snd_seq_ioctl+0x21f/0x400 [ 222.670088] ? snd_seq_open+0x5b0/0x5b0 [ 222.674214] ? __might_sleep+0x95/0x190 [ 222.678210] ? snd_seq_open+0x5b0/0x5b0 [ 222.682206] do_vfs_ioctl+0xd5f/0x1380 [ 222.686210] ? selinux_file_ioctl+0x46f/0x5e0 [ 222.690723] ? selinux_file_ioctl+0x125/0x5e0 [ 222.695259] ? ioctl_preallocate+0x210/0x210 [ 222.699684] ? selinux_file_mprotect+0x620/0x620 [ 222.704475] ? iterate_fd+0x360/0x360 [ 222.708304] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 222.714824] ? fput+0x128/0x1a0 [ 222.718149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.723716] ? security_file_ioctl+0x8d/0xc0 [ 222.728257] ksys_ioctl+0xab/0xd0 [ 222.731746] __x64_sys_ioctl+0x73/0xb0 [ 222.735676] do_syscall_64+0xfd/0x620 [ 222.739790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.745002] RIP: 0033:0x459829 [ 222.748214] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.767270] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.775002] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 17:18:28 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r3, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/94, 0x5e}], 0x6, &(0x7f00000009c0)=""/202, 0xca}, 0x9}, {{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001000)=[{0x0}, {&(0x7f0000000b80)=""/163, 0xa3}, {0x0}, {&(0x7f00000013c0)=""/220, 0xdc}], 0x4, &(0x7f00000012c0)=""/161, 0xa1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000e80)=""/14, 0xe}, {&(0x7f0000001540)=""/241, 0xf1}, {&(0x7f0000001640)=""/24, 0x18}, {&(0x7f00000016c0)=""/5, 0x5}, {&(0x7f0000001700)=""/230, 0xe6}, {&(0x7f0000001800)=""/100, 0x64}, {0x0}, {&(0x7f0000001980)=""/120, 0x78}, {&(0x7f0000001a00)=""/26, 0x1a}], 0x9}, 0x9}, {{&(0x7f0000001b00)=@in6, 0x80, &(0x7f00000020c0)=[{0x0}], 0x1, &(0x7f0000002140)=""/163, 0xa3}}, {{0x0, 0x0, &(0x7f00000054c0)}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}, 0x1}], 0x8, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffdd8) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 222.782375] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 222.789667] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.796978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 222.804288] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 17:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:28 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:28 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:28 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)) 17:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 223.094936] ALSA: seq fatal error: cannot create timer (-19) [ 223.118920] FAULT_INJECTION: forcing a failure. [ 223.118920] name failslab, interval 1, probability 0, space 0, times 0 [ 223.143796] CPU: 1 PID: 9746 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 223.150892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.150910] Call Trace: [ 223.162912] dump_stack+0x172/0x1f0 [ 223.162934] should_fail.cold+0xa/0x1b [ 223.162956] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 223.162968] ? lock_downgrade+0x810/0x810 [ 223.162989] __should_failslab+0x121/0x190 [ 223.163003] should_failslab+0x9/0x14 [ 223.163014] __kmalloc_track_caller+0x2de/0x750 [ 223.163028] ? rcu_read_lock_sched_held+0x110/0x130 [ 223.163039] ? kmem_cache_alloc_trace+0x348/0x760 [ 223.163050] ? vprintk_default+0x28/0x30 [ 223.175990] ? snd_timer_instance_new+0x72/0x3d0 [ 223.176013] kstrdup+0x3a/0x70 [ 223.176030] snd_timer_instance_new+0x72/0x3d0 [ 223.176049] snd_timer_open+0x8a7/0x1760 [ 223.198180] snd_seq_timer_open+0x240/0x580 [ 223.198201] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 223.198215] ? mark_held_locks+0xb1/0x100 [ 223.198235] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 223.207169] ? snd_seq_timer_defaults+0x389/0x470 [ 223.246937] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 223.246957] ? lockdep_hardirqs_on+0x415/0x5d0 [ 223.246979] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 223.261809] snd_seq_queue_timer_open+0xa3/0xc0 [ 223.266515] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 223.271851] snd_seq_ioctl+0x21f/0x400 [ 223.275796] ? snd_seq_open+0x5b0/0x5b0 [ 223.279838] ? __might_sleep+0x95/0x190 [ 223.285149] ? snd_seq_open+0x5b0/0x5b0 [ 223.289164] do_vfs_ioctl+0xd5f/0x1380 [ 223.293079] ? selinux_file_ioctl+0x46f/0x5e0 [ 223.297602] ? selinux_file_ioctl+0x125/0x5e0 [ 223.302299] ? ioctl_preallocate+0x210/0x210 [ 223.306744] ? selinux_file_mprotect+0x620/0x620 [ 223.311544] ? iterate_fd+0x360/0x360 [ 223.315363] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 223.320912] ? fput+0x128/0x1a0 [ 223.324212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.329764] ? security_file_ioctl+0x8d/0xc0 [ 223.334198] ksys_ioctl+0xab/0xd0 [ 223.337686] __x64_sys_ioctl+0x73/0xb0 [ 223.341611] do_syscall_64+0xfd/0x620 [ 223.345448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.350673] RIP: 0033:0x459829 [ 223.353876] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.372794] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.380523] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 223.387811] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 223.395110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 223.402499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 223.409794] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 17:18:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:31 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:31 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0107000000003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 225.646021] IPVS: ftp: loaded support on port[0] = 21 17:18:31 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1f", 0x2e) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:31 executing program 5 (fault-call:2 fault-nth:5): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:31 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x4c, 0x400000) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000180)) writev(r0, &(0x7f0000001240)=[{&(0x7f00000001c0)="da1080af266d3a1101e84f3448855ab97db3602f3232ab234546a5d9e5ce8f4ed30f1801117d653da136e9c8b1c8d63c3f1cc90f6712b11def973d73ec5b31fd035d38a9d25cca574f7f995c6d4082a5a6be0f8f1f67e7df90cb85ff2f0986596dbb179fdc8f626c37e8a264ace1c5152ac9590a718326e20122e1164da5372a90a80f4bdbdcc92484198bd392af49f2f900eae0d7a8caba85539b1f399989cfbeafc44eb3d64a49343de71bff3f453e4ed374105c11406d6216a76facd6e7522c5b49fba820e58c1eb6b93e1ef3bd4a792d41614dfc3361cc44ce54622deb4c2000e61b0944adaccc83e4115c13f6f22f108d4c3d89b975e6345477407b420946f85c4e1e90d566f7eef82961b005d3a7823d20390a3a58a072f383fd8f3b4c42b3762632f2bb7b35644cb356dbcee8e54693426e50230681ecb739bd8d0ded8f51d631c376bdd11b74a2770cb242bb2e16b53542007ea869d6b9ab229057106791b08114fb24824561cf17295d8f3ecd92bb9b82d72c3af2e5f48c28c826828eae1d482c2adb37860afe16b814fce264211c266305b4917101a26d2870c8fb13a2370dfeeae1dba644bff3ed3bc38b163f886f6e320b3d55f5c5f5b10a7789d19fecb90dc4b4b08099adfc12a66056e237c8b4e9cfd4246c2cf6a6164d08e310104c89b273171e0e794a4dc8597e95e65a6c1f3bba564f518d11d6ae873996fc374ef439e97223cb93e118a5dd7fd9a71eaacbbb116fff41e2771747bc0e7792fc672bafd620631709f77ea928d9de26c6b9ba9a4b1797f93abe9f1807bd25ac442b26e154113c7f69d0b9c809c28e4b8c74a686be7afc5d80bb429652b01dccafc5dca27d117f91b80a01307c4ad4c4c7c1e2b3bf1e6ac8ea3bb4e5b9ac634de694cd19e715ce70dcaea655ff05669f57be855add47cacec47dea71ea12003f9dcbee832d5c04100b5d10aeaa156eba23315774e6ca71a72c43effd749531472edf64ffd19e4326f75971d6771fa2522baa5d3d33a7b6d262affba24ad0f1fff183a490b2f4583ef80088565f3f01e3fbf124327c2e9d71aa9883e651283c44aaa91ff586048b8c39a91016f4c6876a7048aa057956d43972038def8c2fab35f11a53eca09e8eb6fa20950a050788a4d45eb527e338eca7e55d59ab9575fade0de1c2ff48f8e41bdd4c1bb20ffaed353a9068af9bcaf770d4e011340b120887a8da92365b2571eb56aa1cf39b26589f09cfffe7ddd5b2f2843c07916bc88d883aedf3d46f3b54ce149e9190b4a192a9e129021e3ced96bb28166b3362ec94b7758981fb18af623f703b899cb4a54016f5d20eef01d5c6dacab67fa106bb7d006aa44652996810d376436c4d8cb263c402c9613c2c0c91281b848239fdf9ad507073d687186a2ec0d078680f9e2c35121c18e6a945446659e16628f91e5b53a41b08f00f1358d5e1319d86bfaadd3f7ccd1a185201c35980512e5b1b8d7d9827562a556fba2ad76ee76e153450e311e3fda50323c0c50abaada136e312e81799f15d10293f024665f23325b32a2a5b544a2c1d7d559749722cb3faa2eca5f724832ec95221be958b51ed85eeb4e4ba27327495a4a65b6653626df1d90112b95407347fd50741edbbea03e5306b49ef5341f5873fec06348f8cb3b7994eda4dd6d5070a572f786dff8be1df75f6f138202b1c0f4076150ce3fab3d2dc4dd171efdcd2758b0181667fe4cce7fcebdb7f44c14d5805710330fb0e2a2926f9f0ff4958cfe34951fa7d6ed7c1d9813e6498050ef5ceb4cee339f33dbaea52219f6bd2de0a9b13064a5571b7f214d30f8d1576d6727cd6d985ff0124209afa54dc246e5c3219e9f144ea50dac205d23a2fd0c3d1b367881670fc391de211600441e20366a136b617190302ba36f7962214cb128a15908c58dc73f0fe751a77dc666f06fd6921a381e024831b3dc9ee69740f676c2e3443a8f6f8078fdfdc121e6019ab428560364234126074f877f6e18ab78db3bd5c630df4e9d31943af7aa56528fd3404f4cf37d12111dba866c6933b0f87663eb6a62126e941e09d16ea87ff78e0fbbe526b65e700628e17a76d03a6717bbfdbb95261b474ebbbec5d53c57963ba32b422c741c6d24599a0baddc78c99e1725bed1f37e8b6a68442f53b6ed31b0e8e90f1e6633122aa2ec7579ef862b560a5ecfa9de9cc251f2837931b8e8c8d801b1cc5163ee9587545916d27adb7a02637be6e45f6836c05d45cfc02cce7804037a83b80f34431cdb286f2af8c3954fe1b4d4a7bfb7d73e568e22f16f276b8e61a7a25a3e52dbda58e8534c4551be33c2016bc2266db6175b17758576b019b6592c19dee6d8064e076a4132df53044165146a921fb4deebf02aadb8adff823a9ebc3e69b65545adb063ff7d9a500b9722952824a6781434dc5d64a526b8a5f93b63090d865b7b23a2e668ccace4227ab559162f9c6cb3b63cf80f0a880bdfa79b03fb1c1934e705eeea11cc99db5cca5afb9f40ecd75555ff8503908b715626fe87db21c98a4e8428763b8ec2ca6f3472a9dd167fc70151c5e01a4a4706a5292321a77fc1e504b09eb0f337ef60ed04fcd7322371a6fe466a06eb76717ad00f9f61b07c04073f143c6addd3b6665ec8f35055d09632c376f879dd9134ef70c3209b66050c650ef2ad77db53ea307ec8f599751fe29e42ee1c5288088a1798a3f6e3900ad66512b3b38b64a92873cc56d19f94ab45f6aba82c28704186fd833aab887fcc03bff4fa8f5fa41fe9faa0baebe7b503e78d945585020b7d3401406b7dc4bf5042b8b045f8a8fc4b4c77bf2cbc2ea7439cf5dbe411a0b78aa2ae8ee6930b5c7a52dd82caf5b4777d132384bad360ca2beb57c2289a19d1cc22ec5b201aaa4892bdfef8731075f17cd43c79dc9ad9e23d44381e6c8df9e4d40eba587ef067d09364efcd2a333056fa84ae2e5116eec6dd9b0923b07f64963f9f75ac80304ef3b63fdecb47e065a4b7ff3b18e7354e33a3ea8f6197586bbe94b0e82737b2026ecc03b85d66636de3cd1760458b21f04544a1deb6f18616a9944cb318708ab1eae8fe78159747333502d4041a0c2fddd7ff630d356009735b9167a087cfc1654793df990376c08b5379152c4d74ff80203f73eaee4b88b2410337458912629e41f356c357ed4de85e50cef235127ce986e5cdf8c01b5d7e2e730b562e1858d60d9e2b9333e35e62e396edb6eff3fafdad7c3f21b982f5a37d256ca56e136711da80713105828c89977c1c2e837dc532ceef1ad233d4c0751b28358a25a53f93d77888bf5bc152e6b681c821350dc806976cf028a60a22324adef65455b96511fad012820f02aa8131200aec4ff78bdf8fd08d9534badcf40630394562076f007ffd3e39139a1d93fa815f202ca9e18f18de83050a23468db83ac3cc8978bcc9700729a69f55a2895e990529c80547bce56c8ffcce8fae22a9a67da403b96dd059dbf6922171cae7570207c6798b201735edd6a31ffbf0ae1c986885ff7e1065953c9482ed9bb364063b43b61e7eabe7ae248199b1743fc5e0d86867963bf60ce46d5ad0bc7396c21756f6c7ad0fa7fd714384c74b600bdeb46a8460e19b7c6ac9a12c341c48d299c357100d604a0b2c15c20e05969a848806db7d6c9a014274931197cb183c8dccc0679fe4b6e1d3d6e7746e64a37d620a7169305707d8092480ea3a82f3abbea9bf6e028b0f392a2f3de637e4aaa92c8c4d540c560c6aa1c4624ddf86085520de60da7ca311fcd1513dc4354c959183f277f94ba79f1d11c2128dce503f4d639d783ce8f22da05773a70b005d670eba38b8ee1ea1b9f8544b63153b5b34aef542ea98e1869b3907a184346b583989ed897c17fa3f0e2b8d9ed339a624198369e46b33f8be11116e55aa371b4b7463b26cf852ee5c26a92096c0acaca730f8a764c8c4dc8263b619ddfc477a9030b5f6e2538ef77e876e64ff9150ec884e1bfb6f47c986d1d5e11bacaa4d9c1a8fa4fb23acfaac992fc2d84d2f6c8555e2d472d2e8c5cda27f06ead95a510a57d675aabc3fcbbdce0d0fb7d1650317a24801e045a15f10105b02c5b690c00bf415e95f3bcf1c13709e664b04afbf273d673732c3f859829fd3c1ad70b38d10135ad8ca4bf69664a2585190b8c9b683911de8884a84401a70a55723a92f12b6745a518fbe7c6e913eab82b25253c99d1f50118ffb68b3ca5ea945c7d42bf0ba700611930b8313ee438dfa49779eb26d7ef2571dd80acb4816d8efbaa67d664ea0575001221f2ef08226cddade5cd3edaa9126ed10f5fd7cb6517e5605f350996b36df1b511b4678e03bd18663a9f2e9ac020b9d5df46b4560f9b785aadd67f3fc843eba17f7b05f764ff646a0d93ec089b64309016ee0b0cb17cbba8661b10636da229a53bb412d63ee7513df36b531b6db7d37b20336936adda4fd3924f9ca531253d094b025b001bbc76d9f57ccf4283ce8831282ef2973ba999250c6bdb4bdc7fbcf399f65b61c91264630824b48384fd8a58aa3968b1b842c38782d381b270e7fe309b3b4972248be8bb48369a5aa2018fb3f1c8ef99077d5b1f0489bae47c88c9ddd5f6519d6c94b0a3a21fb86c2c536e003e5ffb700306f5b774bd40f0310864995c14662d733faa1dd343bb67dfdbafd796f08111e228e3181e96d2144b95b6fa5ff04af36aea5b9c92b3eabde0a3c21f5f9fccd042933731aa8055b2325ff850975ee9a439c874668e4739c0d7ffe13154be06e6087ae4bf0e7e47a44ed78a001545d3cd76448628b230e58473f8197632897c38129f8431026b145626cd25f9b310aa52ad942a48e8a0182087f0db3286e470795f2d76417ecf3e773dd381c201d2f88494692e6b1cd5c13a7824adea7ff6d1835238bffa0918ca32eadea84e5566154881b4c0dad8b34ea5338eec59458d3d4f2251e651c748f5dbb937f44ca5b3fff8806b2da61af6fc9157efb409626d204fda866bbbdb7321ee19b8f82d6aa4a921f51d118252dcf651ceba8c0cdd5ebc7183e6793d0efeab010df8d7979e7f046cca0e4e0954b768c71563956c859c963487c6689d5c9d5aeb1efad37b519d8305b0e62bb11cd15744d7a33c79fd4be057323473db3cf2323e36d811032444c62953e628ca8c4c59f1b6bda89a5fed1039e55ba5e65dbcc799f264ad2a2b991880f52b05bed03105d476e0a3053f6767baed25eed81e68dfe06472915aad8bdcd478c39784d46ad7d9dc6d6397b10cdfa901501295862d392edda2cae99e92cc106aa375b3655c3438e9be5ac981bf9dc323d088522974597fca7098385ca18d580b992bdcce978b79aa41681d7a974b3ba219913a11f641d91113e34d00becfe9613eea74e090f6a5eca411a367d2566264b8a59356d48f6739cdea284827d0e0fc6ba1c173a9594d039dabc8608d180bea252d52920f9be450df406a63d73a02c9386a0abd140a873e8dfa11da4d0d870ba59d9f6e5cc1884c3c3c998e64795496dd51461ff85a121ae6afa7f3a656a95236ff46605e61a4866cb7088aa9e07a2440f8379a4879a73cb4840ccaf7695a132d5cb03f25e337346f303a64280ba083628b7c1f5729b7df45a4e518b472e54f5d83a6031b0f26b0666e79dc84da55ed8878c4c56cb1ac26f619fc721bcbdeafeed4771e79b25b050fb80ed92c124a574d1971f24195e070a5a21e1ccc1bec8582daa9ac0c0fc84d2b046af0721ce0a5d085ae0fd231b9febefd6343d24121212139f38daac2e18495f2670a7c1bd71624", 0x1000}, {&(0x7f00000011c0)="a479c2f6262630b58576f232e3bd690a69851285f7e9517c5f86997718cb48488fa1f3d404e9a3d88327158935f3457ede03244037ba64b6846e02a41c28f07c64ae8f43d9491a", 0x47}], 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) 17:18:31 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000b80)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='caif0\x00') ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 17:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 226.486133] ALSA: seq fatal error: cannot create timer (-19) [ 226.517336] IPVS: ftp: loaded support on port[0] = 21 17:18:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc1000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 226.549800] FAULT_INJECTION: forcing a failure. [ 226.549800] name failslab, interval 1, probability 0, space 0, times 0 [ 226.616638] CPU: 0 PID: 9778 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 226.623648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.623657] Call Trace: [ 226.623690] dump_stack+0x172/0x1f0 [ 226.623712] should_fail.cold+0xa/0x1b [ 226.623731] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 226.623745] ? lock_downgrade+0x810/0x810 [ 226.623775] __should_failslab+0x121/0x190 [ 226.623795] should_failslab+0x9/0x14 [ 226.623812] kmem_cache_alloc_trace+0x2cc/0x760 [ 226.623828] ? memcpy+0x46/0x50 [ 226.623844] ? kstrdup+0x5a/0x70 [ 226.623863] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 226.623883] snd_hrtimer_open+0x44/0x114 [ 226.623899] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 226.623914] snd_timer_open+0x101d/0x1760 [ 226.623940] snd_seq_timer_open+0x240/0x580 [ 226.689760] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 226.689776] ? mark_held_locks+0xb1/0x100 [ 226.689802] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 226.708551] ? snd_seq_timer_defaults+0x389/0x470 [ 226.713421] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 226.718560] ? lockdep_hardirqs_on+0x415/0x5d0 [ 226.723184] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 226.723208] snd_seq_queue_timer_open+0xa3/0xc0 [ 226.723229] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 226.738329] snd_seq_ioctl+0x21f/0x400 [ 226.742237] ? snd_seq_open+0x5b0/0x5b0 [ 226.746255] ? __might_sleep+0x95/0x190 [ 226.746276] ? snd_seq_open+0x5b0/0x5b0 [ 226.746301] do_vfs_ioctl+0xd5f/0x1380 [ 226.746321] ? selinux_file_ioctl+0x46f/0x5e0 17:18:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 226.757633] IPVS: ftp: loaded support on port[0] = 21 [ 226.758195] ? selinux_file_ioctl+0x125/0x5e0 [ 226.772452] ? ioctl_preallocate+0x210/0x210 [ 226.776885] ? selinux_file_mprotect+0x620/0x620 [ 226.781676] ? iterate_fd+0x360/0x360 [ 226.785603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.791169] ? fput+0x128/0x1a0 [ 226.791191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.791205] ? security_file_ioctl+0x8d/0xc0 [ 226.791221] ksys_ioctl+0xab/0xd0 [ 226.791238] __x64_sys_ioctl+0x73/0xb0 [ 226.791256] do_syscall_64+0xfd/0x620 [ 226.791276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.791294] RIP: 0033:0x459829 [ 226.800228] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.800238] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.800253] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 226.800261] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 17:18:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc6000001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 226.800269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.800277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 226.800293] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 17:18:32 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:32 executing program 0: stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x80e85411, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 17:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:32 executing program 5 (fault-call:2 fault-nth:6): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:32 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 227.356544] ALSA: seq fatal error: cannot create timer (-19) [ 227.391882] FAULT_INJECTION: forcing a failure. [ 227.391882] name failslab, interval 1, probability 0, space 0, times 0 [ 227.498390] CPU: 0 PID: 9825 Comm: syz-executor.5 Not tainted 4.19.66 #40 [ 227.505527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.515095] Call Trace: [ 227.517866] dump_stack+0x172/0x1f0 [ 227.521777] should_fail.cold+0xa/0x1b [ 227.525877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 227.531225] ? lock_downgrade+0x810/0x810 [ 227.535594] __should_failslab+0x121/0x190 [ 227.540128] should_failslab+0x9/0x14 [ 227.544155] kmem_cache_alloc_trace+0x2cc/0x760 [ 227.549165] ? memcpy+0x46/0x50 [ 227.552715] ? kstrdup+0x5a/0x70 [ 227.556285] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 227.561176] snd_hrtimer_open+0x44/0x114 [ 227.565410] ? snd_hrtimer_callback+0x3d0/0x3d0 [ 227.570306] snd_timer_open+0x101d/0x1760 [ 227.574662] snd_seq_timer_open+0x240/0x580 [ 227.578795] IPVS: ftp: loaded support on port[0] = 21 [ 227.584320] ? snd_seq_timer_set_skew+0xb0/0xb0 [ 227.589202] ? mark_held_locks+0xb1/0x100 [ 227.593584] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 227.598807] ? snd_seq_timer_defaults+0x389/0x470 [ 227.603772] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 227.608971] ? lockdep_hardirqs_on+0x415/0x5d0 [ 227.613784] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 227.618984] snd_seq_queue_timer_open+0xa3/0xc0 [ 227.623693] snd_seq_ioctl_set_queue_timer+0x347/0x450 [ 227.629086] snd_seq_ioctl+0x21f/0x400 [ 227.633159] ? snd_seq_open+0x5b0/0x5b0 [ 227.637399] ? __might_sleep+0x95/0x190 [ 227.641583] ? snd_seq_open+0x5b0/0x5b0 [ 227.645656] do_vfs_ioctl+0xd5f/0x1380 [ 227.649644] ? selinux_file_ioctl+0x46f/0x5e0 [ 227.654217] ? selinux_file_ioctl+0x125/0x5e0 [ 227.658807] ? ioctl_preallocate+0x210/0x210 [ 227.663522] ? selinux_file_mprotect+0x620/0x620 [ 227.668509] ? iterate_fd+0x360/0x360 [ 227.672465] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 227.678149] ? fput+0x128/0x1a0 [ 227.681623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.687394] ? security_file_ioctl+0x8d/0xc0 [ 227.692029] ksys_ioctl+0xab/0xd0 [ 227.695701] __x64_sys_ioctl+0x73/0xb0 [ 227.699706] do_syscall_64+0xfd/0x620 [ 227.703845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.709289] RIP: 0033:0x459829 [ 227.712620] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.731685] RSP: 002b:00007f298f586c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.739872] RAX: ffffffffffffffda RBX: 00007f298f586c90 RCX: 0000000000459829 [ 227.739882] RDX: 0000000020000340 RSI: 0000000040605346 RDI: 0000000000000003 [ 227.739890] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.739896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f298f5876d4 [ 227.739903] R13: 00000000004cd998 R14: 00000000004d7a20 R15: 0000000000000004 17:18:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) mmap$perf(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x6, 0x40010, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x234000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xeb6) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x6, [0x4, 0x2, 0x9, 0x5, 0x36aae19f, 0x6, 0xffff, 0x2, 0xf7c, 0x1, 0x4, 0x2, 0x4, 0x8, 0x2, 0x0, 0x9, 0x7, 0x5, 0x3, 0x1, 0x4, 0xc64, 0x5, 0x100000001, 0x1f, 0x6, 0x1000, 0x8000, 0x3, 0x5, 0x7, 0x401, 0x7fff, 0xfffffffffffffffb, 0x5, 0x7, 0x8, 0x65, 0x0, 0xfffffffffffff676, 0x5, 0xd0ee, 0x81, 0x1, 0x40, 0xffffffffffffff41, 0xa85], 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x480000000000491, 0xffffffffffffffff], [0xc1]}) 17:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(0x0, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:33 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 227.959923] 9pnet: Insufficient options for proto=fd [ 228.039441] IPVS: ftp: loaded support on port[0] = 21 [ 228.198469] IPVS: ftp: loaded support on port[0] = 21 17:18:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:33 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(0x0, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:33 executing program 5 (fault-call:2 fault-nth:7): r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:33 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r0, 0xf5, 0x10}, 0xc) io_setup(0x1004, &(0x7f00000000c0)=0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10187d, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x71a33ff7158018cf}) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f00000001c0)='M', 0x1}]) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) [ 228.317640] 9pnet: Insufficient options for proto=fd 17:18:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:34 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 228.345478] ALSA: seq fatal error: cannot create timer (-19) 17:18:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(0x0, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 228.494858] IPVS: ftp: loaded support on port[0] = 21 17:18:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0003001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 228.544184] 9pnet: Insufficient options for proto=fd 17:18:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 228.585725] ALSA: seq fatal error: cannot create timer (-19) [ 228.619617] IPVS: ftp: loaded support on port[0] = 21 17:18:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$UHID_INPUT2(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00ffff0000d2deb3ee34a5a98402c55143a73a628920ff1b86b0ef1293ae3397660fbe0b713c7aa968b9b9e424f3b900010000cbecf90fb9840900cf66e5085ce666b76f5d690355f77fb03b69abdab0463b43356b26502e889e908cbb6326368ea92f56f58dc9325423a1dee443fb2113571b441166855fe78780db6567447a56a5ac35507e90845c5aba4205a305ede2c84b59198ca80f79ee7900000067de2730710000000080000000009391b4723322d8f75e4594abb17ea02f19a111a59f508e257f2bb6f86142f7e8e22ee18ddf918c9c6d0ab898468201506d052ffaf43a47bb75b24671dac0048b0952f0fed9898b8369ee6dc6cab8933acd2a4f062cc548208667c68cfe5ccb0e840236e4546474c3d46694677d6c2f9090d274caee3964b1f6c4911e3fb637265ca368ff3580e626c30e8355ff"], 0x6) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x402980) connect(r3, &(0x7f00000000c0)=@sco={0x1f, {0x5, 0x8000, 0x3, 0x20, 0x100000000, 0x1ff}}, 0x80) 17:18:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x2, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:34 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = socket$kcm(0x2b, 0x25, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x9, 0x2084, 0x20000000000001, 0x0, 0x0}, 0x2c) 17:18:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4b47, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:34 executing program 0: socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x539caec23b87a6b0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x401) stat(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) getpgrp(r3) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) finit_module(r0, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x3) syz_open_dev$radio(0x0, 0x1, 0x2) 17:18:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4b49, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 229.033999] audit: type=1400 audit(1565630314.622:64): avc: denied { map_read map_write } for pid=9914 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 17:18:34 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000180)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x8001, 0x0, 0x100000000, 0xfe3e, 0x7, 0x800, 0x2, 0x1}}) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x800) r3 = memfd_create(&(0x7f00000000c0)='\x00\x12\x00\x00\x00\xe8\xff\xff\xff\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 229.507540] IPVS: ftp: loaded support on port[0] = 21 17:18:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x541b, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(0x0, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:35 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5450, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000180)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x8001, 0x0, 0x100000000, 0xfe3e, 0x7, 0x800, 0x2, 0x1}}) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x800) r3 = memfd_create(&(0x7f00000000c0)='\x00\x12\x00\x00\x00\xe8\xff\xff\xff\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 17:18:35 executing program 0: socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x539caec23b87a6b0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x401) stat(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) getpgrp(r3) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) finit_module(r0, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x3) syz_open_dev$radio(0x0, 0x1, 0x2) [ 230.016778] syz-executor.1 (9931) used greatest stack depth: 22160 bytes left 17:18:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5451, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 230.211909] IPVS: ftp: loaded support on port[0] = 21 17:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5452, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc000f001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5460, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:36 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc001d001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:36 executing program 0: socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x539caec23b87a6b0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x401) stat(0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) getpgrp(r3) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) finit_module(r0, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x3) syz_open_dev$radio(0x0, 0x1, 0x2) 17:18:36 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40049409, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40086602, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc003f001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 231.207652] IPVS: ftp: loaded support on port[0] = 21 17:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40087602, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:37 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4020940d, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:37 executing program 0: getpgid(0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x141001) clock_getres(0x6, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x1, 0xa35, 0x4, 0x0], 0x5, 0x237, 0x4, 0x6f6c, 0x3ff, 0x200, {0x7, 0x0, 0xec, 0x4, 0x659, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400, 0x37dce2ed, 0xd9, 0x0, "8145b113caa5929639760ff0515a292cb364b3d0afc8738030bba6eb57c7d073"}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f00000000c0)="4dda1953f37e352500945f03ddbfc604f61e62ccbdd2d5613f11a6f2a8aab5726d5e0c32d3eb26e63f4caef644f7de96f80bbef0521da4bfd8697ef91321cbfaf5ddc9e679b2605d75ca79e5fd8d83153cc25b711d05e215596a6fb19d418a4939ad5dce0a0d666f4373c6443fffcd3bccf60c2bdf3e8d2d25531bc6c3446dd147b71fa01242c3e14d6f46725b8f1d7a02be8e68b382a8895ec8a475648635266272a0ee1cbf2fffc18ee4307612062b7190504e939de02ca8d227caf563af031339cf12bb94f5f23fc4add81557432d1b41c006c116cc", 0xd7}, {0x0}, {&(0x7f00000002c0)="2edac4a543d4271bf0782bac658775f28dc1f373df34cbe6547c8afc6b300a7460ad7a734b416f93cc95720275f3bba917edb8f8df2e0160b9204256d8b044822023aeaacae10abb0e68ebeeb9a4ad224498c4f6eabff692eafd79ab4c3fa6895ff28c899a301b7880ace9c01ac7dc3756ee8eb5c8777621544fd63651cd9022cb9c9d8bbb26404491e867bd39c78538bcbe0dfc2514444b7d3118fa580d536a005f6b0402b25a950a54cbab5b595a2fbe0725b3d9", 0xb5}, {&(0x7f0000000380)}, {&(0x7f0000001380)}], 0x5, 0x0) write$P9_RFSYNC(r3, 0x0, 0x0) 17:18:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:37 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25={{0x3, @null}, [@default, @netrom, @default, @default, @remote, @default, @remote, @null]}, &(0x7f0000000040)=0x80) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x200200, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0xf001, 0xd000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000280)={0x4000, 0x10000}) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000200)=@null) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7) ioctl$TIOCSIG(r3, 0x40045436, 0x3a) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x4000000, {}, {0x3, 0xc, 0xb96e, 0x2, 0x7f, 0xbbd5, "5f5ed1d3"}, 0x6fcf, 0x3, @offset=0x1, 0x4}) ioctl(r2, 0x1000008912, &(0x7f0000000100)="cc99a63d8d532f4cac22c73c17c30664979e1bd5c84bbcf62456f42542b5d47c3327bdb2fbbb8daff8f35b681fa76b2abb8c558040e1e7c1ab41764aefdb8281fcc77918d9") memfd_create(&(0x7f0000000300)='\x00', 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, 0x0) 17:18:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x402c5342, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000200)={0x4, {0x3ff, 0x3, 0x7, 0x3}, {0x3, 0x3, 0x3, 0x3dee1cb4}, {0x93, 0x3}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x0, 0x9, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="37dadb2e386206a6d290b232e2a7a69ef485234922b847c5d39298cd4a77e260d8b0bfea05b434c3e3eaec510bffda827f491023f51e4ed80dcde3a93210c73ff2c5884f83820aca81d977635e99ffdcf2e5858ea124ac929f888481d2624564478e39e46f86ae5e67240d06837dfd912d1f2606268d04a2b6fe1ecbc56f6e2367297d2545ffb012f339815de3793d7370e582b45ff7c90a67fc944f74012bc9dd71475fed857c6f90e9fa4698f07de4e2e1dae463ad177f", 0xb8, 0xffffffffffffffff) keyctl$update(0x2, r5, &(0x7f0000000380)="de700bda85ee31f9a130bca6442933df45f9e13b523271b78c2f229337e3c38766efeac6f8f1c900e387de7b1b59f755b3f0a58bf99aa502400446b5cce5bbab745c4fc7b3e27854d70e13a7d8481e1f04fcace3e265a8f9be29279bbcfe3b223356a670b514e2e9da94b2a070c10c97572f9f4cb9f6a9fb1ee38881267328419dc5d78c26f6b6f4098944704bab6a06f5b25211e681d289d1f9531032e2295d71afc8b0f3e054ae346dcfb5a6437977e7d1ce7cf2a9062ced7262532472cbccd592c400d1dd58f795409acdef1055a9eb18cba818df7b5b2d79d7c8f0269c63913880baf5b88055c8", 0xe9) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x7f}) 17:18:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fcfe80001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:37 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0x2, 0x204, 0x0, 0xb131, 0x0, 0x9, 0x8}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x99, 0x9, 0x3}) 17:18:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000200)={0x4, {0x3ff, 0x3, 0x7, 0x3}, {0x3, 0x3, 0x3, 0x3dee1cb4}, {0x93, 0x3}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x0, 0x9, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="37dadb2e386206a6d290b232e2a7a69ef485234922b847c5d39298cd4a77e260d8b0bfea05b434c3e3eaec510bffda827f491023f51e4ed80dcde3a93210c73ff2c5884f83820aca81d977635e99ffdcf2e5858ea124ac929f888481d2624564478e39e46f86ae5e67240d06837dfd912d1f2606268d04a2b6fe1ecbc56f6e2367297d2545ffb012f339815de3793d7370e582b45ff7c90a67fc944f74012bc9dd71475fed857c6f90e9fa4698f07de4e2e1dae463ad177f", 0xb8, 0xffffffffffffffff) keyctl$update(0x2, r5, &(0x7f0000000380)="de700bda85ee31f9a130bca6442933df45f9e13b523271b78c2f229337e3c38766efeac6f8f1c900e387de7b1b59f755b3f0a58bf99aa502400446b5cce5bbab745c4fc7b3e27854d70e13a7d8481e1f04fcace3e265a8f9be29279bbcfe3b223356a670b514e2e9da94b2a070c10c97572f9f4cb9f6a9fb1ee38881267328419dc5d78c26f6b6f4098944704bab6a06f5b25211e681d289d1f9531032e2295d71afc8b0f3e054ae346dcfb5a6437977e7d1ce7cf2a9062ced7262532472cbccd592c400d1dd58f795409acdef1055a9eb18cba818df7b5b2d79d7c8f0269c63913880baf5b88055c8", 0xe9) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x7f}) 17:18:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc00a8001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 17:18:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4058534c, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:38 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:38 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 232.905377] IPVS: ftp: loaded support on port[0] = 21 17:18:38 executing program 1: mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x49) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x2002, 0x0) signalfd(r0, &(0x7f0000000000)={0x7fff}, 0x8) 17:18:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 17:18:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40a85321, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:39 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:39 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) [ 233.468395] IPVS: ftp: loaded support on port[0] = 21 17:18:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40a85323, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc00f0001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) 17:18:39 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 233.705746] IPVS: ftp: loaded support on port[0] = 21 17:18:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40bc5311, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 233.843105] 9pnet: Insufficient options for proto=fd 17:18:39 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 233.921427] IPVS: ftp: loaded support on port[0] = 21 17:18:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 234.110931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pig=10215 comm=syz-executor.3 [ 234.115458] 9pnet: Insufficient options for proto=fd [ 234.211736] IPVS: ftp: loaded support on port[0] = 21 17:18:39 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 234.404416] 9pnet: Insufficient options for proto=fd 17:18:40 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80086601, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 234.548191] IPVS: ftp: loaded support on port[0] = 21 17:18:40 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80087601, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 234.673692] 9pnet: Insufficient options for proto=fd 17:18:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 234.827113] IPVS: ftp: loaded support on port[0] = 21 [ 234.845933] IPVS: ftp: loaded support on port[0] = 21 [ 234.901007] 9pnet: Insufficient options for proto=fd 17:18:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000400)="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", 0x18a, 0x0) 17:18:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0045878, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 235.166619] 9pnet: Insufficient options for proto=fd 17:18:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0045878, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:40 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:40 executing program 0: getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r0}}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc333, 0x2000) r2 = msgget$private(0x0, 0x61) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/112) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 17:18:40 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:40 executing program 2: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0105303, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0007001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 235.442863] IPVS: ftp: loaded support on port[0] = 21 17:18:41 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 235.525191] IPVS: ftp: loaded support on port[0] = 21 17:18:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0189436, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc0008001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 235.672021] IPVS: ftp: loaded support on port[0] = 21 [ 235.761495] IPVS: ftp: loaded support on port[0] = 21 17:18:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:41 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:41 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:41 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc02c5341, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"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"}) ioctl$KVM_GET_DEBUGREGS(r2, 0x4400ae8f, &(0x7f0000000100)) [ 236.323799] FAULT_INJECTION: forcing a failure. [ 236.323799] name failslab, interval 1, probability 0, space 0, times 0 [ 236.401047] CPU: 0 PID: 10336 Comm: syz-executor.2 Not tainted 4.19.66 #40 [ 236.408127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.417521] Call Trace: [ 236.420136] dump_stack+0x172/0x1f0 [ 236.423782] should_fail.cold+0xa/0x1b [ 236.427778] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 236.432892] ? lock_downgrade+0x810/0x810 [ 236.437065] __should_failslab+0x121/0x190 [ 236.441315] should_failslab+0x9/0x14 [ 236.445122] __kmalloc_track_caller+0x2de/0x750 [ 236.449815] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 236.455366] ? strndup_user+0x77/0xd0 [ 236.459176] memdup_user+0x26/0xb0 [ 236.462726] strndup_user+0x77/0xd0 [ 236.466372] ksys_mount+0x3c/0x150 [ 236.469919] __x64_sys_mount+0xbe/0x150 [ 236.474000] do_syscall_64+0xfd/0x620 [ 236.477841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.483055] RIP: 0033:0x459829 [ 236.486253] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.505169] RSP: 002b:00007fc168785c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.512901] RAX: ffffffffffffffda RBX: 00007fc168785c90 RCX: 0000000000459829 [ 236.520182] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 236.527555] RBP: 000000000075bf20 R08: 0000000020000440 R09: 0000000000000000 [ 236.534836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1687866d4 [ 236.542213] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000007 17:18:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0305302, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 236.557206] IPVS: ftp: loaded support on port[0] = 21 [ 236.568486] IPVS: ftp: loaded support on port[0] = 21 17:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1, 0x12, 0x3}, 0x14) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401ef02000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x4) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x27) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000600)=0x2d) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={r3, 0x4}, &(0x7f0000000680)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000280)={0x2, 0x401, 0x7, {}, 0x6, 0x8}) 17:18:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:42 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:42 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0605345, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:42 executing program 2 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 237.129095] FAT-fs (loop0): Directory bread(block 61185) failed [ 237.138882] FAT-fs (loop0): Directory bread(block 61186) failed [ 237.147637] FAT-fs (loop0): Directory bread(block 61187) failed [ 237.155704] FAT-fs (loop0): Directory bread(block 61188) failed [ 237.162566] FAT-fs (loop0): Directory bread(block 61189) failed [ 237.169272] FAT-fs (loop0): Directory bread(block 61190) failed [ 237.200887] FAT-fs (loop0): Directory bread(block 61191) failed [ 237.208878] FAULT_INJECTION: forcing a failure. [ 237.208878] name failslab, interval 1, probability 0, space 0, times 0 [ 237.272120] FAT-fs (loop0): Directory bread(block 61192) failed [ 237.291704] FAT-fs (loop0): Directory bread(block 61193) failed [ 237.307082] FAT-fs (loop0): Directory bread(block 61194) failed [ 237.311537] CPU: 0 PID: 10384 Comm: syz-executor.2 Not tainted 4.19.66 #40 17:18:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 237.320292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.329765] Call Trace: [ 237.332382] dump_stack+0x172/0x1f0 [ 237.336127] should_fail.cold+0xa/0x1b [ 237.340038] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 237.345168] ? lock_downgrade+0x810/0x810 [ 237.349338] __should_failslab+0x121/0x190 [ 237.353598] should_failslab+0x9/0x14 [ 237.357428] kmem_cache_alloc_trace+0x2cc/0x760 [ 237.362154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.367805] ? _copy_from_user+0xdd/0x150 [ 237.372244] copy_mount_options+0x5c/0x3a0 [ 237.376519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.382085] ksys_mount+0xa7/0x150 [ 237.385646] __x64_sys_mount+0xbe/0x150 [ 237.389653] do_syscall_64+0xfd/0x620 [ 237.393482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.398690] RIP: 0033:0x459829 [ 237.401904] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:18:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) [ 237.421353] RSP: 002b:00007fc168785c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.429102] RAX: ffffffffffffffda RBX: 00007fc168785c90 RCX: 0000000000459829 [ 237.436395] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 237.443682] RBP: 000000000075bf20 R08: 0000000020000440 R09: 0000000000000000 [ 237.450963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1687866d4 [ 237.458239] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000007 17:18:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 237.544149] IPVS: ftp: loaded support on port[0] = 21 17:18:43 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5335, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 237.635928] IPVS: ftp: loaded support on port[0] = 21 17:18:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:43 executing program 2 (fault-call:4 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 237.824177] IPVS: ftp: loaded support on port[0] = 21 [ 237.917633] FAULT_INJECTION: forcing a failure. [ 237.917633] name failslab, interval 1, probability 0, space 0, times 0 [ 237.939392] CPU: 0 PID: 10422 Comm: syz-executor.2 Not tainted 4.19.66 #40 [ 237.946561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.946569] Call Trace: [ 237.946600] dump_stack+0x172/0x1f0 [ 237.946622] should_fail.cold+0xa/0x1b [ 237.946643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 237.946661] ? lock_downgrade+0x810/0x810 [ 237.946690] __should_failslab+0x121/0x190 [ 237.946711] should_failslab+0x9/0x14 [ 237.966337] kmem_cache_alloc+0x2ae/0x700 [ 237.966362] ? find_held_lock+0x35/0x130 [ 237.966382] ? fs_reclaim_acquire+0x20/0x20 [ 237.966403] getname_flags+0xd6/0x5b0 [ 237.966424] user_path_at_empty+0x2f/0x50 [ 237.966444] do_mount+0x150/0x2bc0 [ 238.007769] ? rcu_read_lock_sched_held+0x110/0x130 [ 238.007790] ? copy_mount_string+0x40/0x40 [ 238.017089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 238.022649] ? _copy_from_user+0xdd/0x150 [ 238.026817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.032378] ? copy_mount_options+0x280/0x3a0 [ 238.038814] ksys_mount+0xdb/0x150 [ 238.042411] __x64_sys_mount+0xbe/0x150 [ 238.046415] do_syscall_64+0xfd/0x620 [ 238.046439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.046452] RIP: 0033:0x459829 [ 238.046470] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.046478] RSP: 002b:00007fc168785c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.046494] RAX: ffffffffffffffda RBX: 00007fc168785c90 RCX: 0000000000459829 [ 238.046508] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 238.055503] RBP: 000000000075bf20 R08: 0000000020000440 R09: 0000000000000000 [ 238.055512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1687866d4 [ 238.055521] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000007 17:18:45 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) 17:18:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:45 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000011c0)={0x0, 0x7, 0x9, 0x1000000009}, 0x10) listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) 17:18:45 executing program 2 (fault-call:4 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17:18:45 executing program 0: accept4$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x0, @initdev}, &(0x7f0000001280)=0x10, 0x1ab13fd49dfcfd6c) openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x69d43992, 0x100) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mq_open(&(0x7f00000000c0)='nr0\x01\x00', 0x0, 0x46, &(0x7f0000000100)={0x1000, 0x1, 0x0, 0x20, 0x10000, 0x7b, 0x0, 0xa9}) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept(r1, 0x0, &(0x7f0000000140)) getgid() listen(r1, 0x0) unshare(0x40000000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = accept(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x800454dd, 0x70e000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001200)=0xc) [ 239.935844] FAULT_INJECTION: forcing a failure. [ 239.935844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.947724] CPU: 1 PID: 10430 Comm: syz-executor.2 Not tainted 4.19.66 #40 [ 239.954770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.964166] Call Trace: [ 239.966810] dump_stack+0x172/0x1f0 [ 239.970483] should_fail.cold+0xa/0x1b [ 239.974417] ? kernel_text_address+0x73/0xf0 [ 239.979051] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 239.984201] ? mark_held_locks+0x100/0x100 [ 239.988491] __alloc_pages_nodemask+0x1ee/0x750 [ 239.993200] ? __alloc_pages_slowpath+0x2870/0x2870 [ 239.998258] ? find_held_lock+0x35/0x130 [ 240.002367] cache_grow_begin+0x91/0x8c0 [ 240.008284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.013864] ? check_preemption_disabled+0x48/0x290 [ 240.018956] kmem_cache_alloc+0x63b/0x700 [ 240.023150] getname_flags+0xd6/0x5b0 [ 240.026986] user_path_at_empty+0x2f/0x50 17:18:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0a85320, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 240.031173] do_mount+0x150/0x2bc0 [ 240.037308] ? rcu_read_lock_sched_held+0x110/0x130 [ 240.042359] ? copy_mount_string+0x40/0x40 [ 240.046631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.052206] ? _copy_from_user+0xdd/0x150 [ 240.056573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.059122] IPVS: ftp: loaded support on port[0] = 21 [ 240.062144] ? copy_mount_options+0x280/0x3a0 [ 240.062166] ksys_mount+0xdb/0x150 [ 240.062183] __x64_sys_mount+0xbe/0x150 [ 240.062202] do_syscall_64+0xfd/0x620 [ 240.062223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.062242] RIP: 0033:0x459829 [ 240.075494] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.083374] RSP: 002b:00007fc168785c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 240.083392] RAX: ffffffffffffffda RBX: 00007fc168785c90 RCX: 0000000000459829 [ 240.083399] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 17:18:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="fc00a8001a000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc) [ 240.083406] RBP: 000000000075bf20 R08: 0000000020000440 R09: 0000000000000000 [ 240.083413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1687866d4 [ 240.083421] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000007 [ 240.099287] IPVS: ftp: loaded support on port[0] = 21 17:18:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0a85322, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 240.191278] IPVS: ftp: loaded support on port[0] = 21 17:18:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 17:18:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0bc5310, &(0x7f0000000340)={0x0, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) 17:18:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'hueue0\x00\x00\x00\x00\x00B\xbb\x04,\xb1D` \x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x2, 0x0, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x1f\x00'}) [ 240.729390] kasan: CONFIG_KASAN_INLINE enabled [ 240.734036] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 240.741458] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 240.747714] CPU: 1 PID: 10449 Comm: syz-executor.0 Not tainted 4.19.66 #40 [ 240.754906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.761617] kobject: 'loop2' (0000000082bf8da0): kobject_uevent_env [ 240.764286] RIP: 0010:__lock_acquire+0x1ca/0x49c0 [ 240.764307] Code: 28 00 00 00 0f 85 37 2e 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c1 32 00 00 49 81 3f 60 b1 7a 89 0f 84 55 ff ff [ 240.764317] RSP: 0018:ffff88805b797970 EFLAGS: 00010006 [ 240.777565] kobject: 'loop2' (0000000082bf8da0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 240.795199] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 240.795206] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000001 [ 240.795212] RBP: ffff88805b797b40 R08: 0000000000000001 R09: 0000000000000000 [ 240.795218] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 240.795224] R13: 0000000000000001 R14: ffff8880a7f702c0 R15: 0000000000000018 [ 240.795235] FS: 00007f098936b700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 240.795243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.795250] CR2: 0000001b2f731000 CR3: 000000009f978000 CR4: 00000000001406e0 [ 240.795261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.795268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.795273] Call Trace: [ 240.795298] ? mark_held_locks+0x100/0x100 [ 240.795317] ? __lock_acquire+0x6ee/0x49c0 [ 240.894231] ? mark_held_locks+0x100/0x100 [ 240.898493] ? finish_task_switch+0x146/0x780 [ 240.903013] ? mark_held_locks+0x100/0x100 [ 240.907266] ? lockdep_hardirqs_on+0x415/0x5d0 [ 240.911874] ? trace_hardirqs_on+0x67/0x220 [ 240.916216] ? kasan_check_read+0x11/0x20 [ 240.920390] lock_acquire+0x16f/0x3f0 [ 240.924207] ? prepare_to_wait+0x7c/0x300 [ 240.928388] _raw_spin_lock_irqsave+0x95/0xcd [ 240.932899] ? prepare_to_wait+0x7c/0x300 [ 240.937064] prepare_to_wait+0x7c/0x300 [ 240.941061] ? lock_sock_nested+0x9a/0x120 [ 240.945317] ? add_wait_queue_exclusive+0x1a0/0x1a0 [ 240.950386] ? lock_sock_nested+0xe2/0x120 [ 240.954662] nr_accept+0x239/0x760 [ 240.958221] ? nr_ioctl+0x320/0x320 [ 240.961878] ? do_raw_spin_unlock+0x57/0x270 [ 240.966305] ? finish_wait+0x260/0x260 [ 240.970218] ? selinux_socket_accept+0x5f/0x210 [ 240.974909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.980464] __sys_accept4+0x34e/0x6a0 [ 240.984387] ? __ia32_sys_listen+0x80/0x80 [ 240.988635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.994205] ? put_timespec64+0xda/0x140 [ 240.998286] ? nsecs_to_jiffies+0x30/0x30 [ 241.002461] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 241.007232] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 241.012005] ? do_syscall_64+0x26/0x620 [ 241.015993] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.021373] ? do_syscall_64+0x26/0x620 [ 241.025369] __x64_sys_accept+0x75/0xb0 [ 241.029387] do_syscall_64+0xfd/0x620 [ 241.033210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.038411] RIP: 0033:0x459829 [ 241.043613] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.071978] RSP: 002b:00007f098936ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 241.079884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 241.087165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 241.094447] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 241.101728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f098936b6d4 [ 241.109019] R13: 00000000004bf6e9 R14: 00000000004d1060 R15: 00000000ffffffff [ 241.116314] Modules linked in: [ 241.119565] ---[ end trace 52919c79b1ebb824 ]--- [ 241.124348] RIP: 0010:__lock_acquire+0x1ca/0x49c0 [ 241.129207] Code: 28 00 00 00 0f 85 37 2e 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c1 32 00 00 49 81 3f 60 b1 7a 89 0f 84 55 ff ff [ 241.148144] RSP: 0018:ffff88805b797970 EFLAGS: 00010006 [ 241.153526] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 241.158101] kobject: 'loop4' (000000004ef5edbb): kobject_uevent_env [ 241.160806] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000001 [ 241.160814] RBP: ffff88805b797b40 R08: 0000000000000001 R09: 0000000000000000 [ 241.160820] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 241.160826] R13: 0000000000000001 R14: ffff8880a7f702c0 R15: 0000000000000018 [ 241.160837] FS: 00007f098936b700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 241.160844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.160851] CR2: 0000001b2f731000 CR3: 000000009f978000 CR4: 00000000001406e0 [ 241.160865] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.167320] kobject: 'loop4' (000000004ef5edbb): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 241.174555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.174565] Kernel panic - not syncing: Fatal exception [ 241.175912] Kernel Offset: disabled [ 241.252179] Rebooting in 86400 seconds..