[ 49.945110][ T26] audit: type=1800 audit(1573429520.046:27): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 49.972556][ T26] audit: type=1800 audit(1573429520.056:28): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.621437][ T26] audit: type=1800 audit(1573429520.806:29): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 50.641500][ T26] audit: type=1800 audit(1573429520.806:30): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2019/11/10 23:45:32 fuzzer started 2019/11/10 23:45:34 dialing manager at 10.128.0.105:33901 2019/11/10 23:45:34 syscalls: 2553 2019/11/10 23:45:34 code coverage: enabled 2019/11/10 23:45:34 comparison tracing: enabled 2019/11/10 23:45:34 extra coverage: extra coverage is not supported by the kernel 2019/11/10 23:45:34 setuid sandbox: enabled 2019/11/10 23:45:34 namespace sandbox: enabled 2019/11/10 23:45:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/10 23:45:34 fault injection: enabled 2019/11/10 23:45:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/10 23:45:34 net packet injection: enabled 2019/11/10 23:45:34 net device setup: enabled 2019/11/10 23:45:34 concurrency sanitizer: enabled 2019/11/10 23:45:34 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 71.063349][ T7918] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/10 23:45:53 adding functions to KCSAN blacklist: 'do_readlinkat' 'evict' 'add_timer' 'shmem_getpage_gfp' 'inactive_list_is_low' 'ksys_read' 'do_signal_stop' 'snapshot_refaults' 'mem_cgroup_protected' 'run_timer_softirq' 'xas_find_marked' 'queue_access_lock' 'ext4_free_inode' 'complete_signal' 'blk_mq_dispatch_rq_list' 'vm_area_dup' 'ext4_has_free_clusters' 'commit_echoes' 'wbt_issue' 'taskstats_exit' 'tomoyo_supervisor' 'do_exit' 'audit_log_start' 'snd_seq_timer_get_cur_tick' 'blk_stat_add' 'process_srcu' 'futex_wait_queue_me' 'ext4_mb_find_by_goal' '__add_to_page_cache_locked' 'find_next_bit' 'do_mpage_readpage' 'ktime_get_with_offset' 'tick_nohz_idle_stop_tick' 'tick_do_update_jiffies64' 'icmp_global_allow' 'pvclock_gtod_notify' 'padata_find_next' 'ext4_mark_iloc_dirty' '__alloc_file' 'snd_ctl_notify' 'page_counter_charge' 'generic_file_read_iter' '__mark_inode_dirty' 'copy_process' 'relay_switch_subbuf' 'ext4_free_inodes_count' 'kauditd_thread' 'kvm_arch_vcpu_load' 'ip_finish_output2' 'rcu_gp_fqs_check_wake' 'poll_schedule_timeout' 'blk_mq_sched_dispatch_requests' 'p9_poll_workfn' 'ext4_da_write_end' '__hrtimer_run_queues' 'do_wait' 'do_nanosleep' 'tcp_add_backlog' 'mm_update_next_owner' 'ktime_get_real_seconds' '__delete_from_page_cache' 'dnotify_flush' 'lruvec_lru_size' 'pid_update_inode' 'pipe_wait' 'yama_ptracer_del' 'fib6_ifup' 'generic_permission' '__snd_rawmidi_transmit_ack' '__perf_event_overflow' 'generic_fillattr' 'n_tty_receive_buf_common' 'free_pid' 'percpu_counter_add_batch' 'task_dump_owner' 'inet_putpeer' 'sit_tunnel_xmit' 'mem_cgroup_select_victim_node' 'dd_has_work' 'delete_from_page_cache_batch' 'd_set_mounted' 'mod_timer' 'generic_update_time' '__find_get_block' 'writeback_sb_inodes' '__blk_queue_split' 'blk_mq_get_request' 'shmem_file_read_iter' 'generic_write_end' 'bio_endio' 'pcpu_alloc' 'osq_lock' 'watchdog' 'wbc_detach_inode' 'exit_signals' 'ext4_nonda_switch' 'tick_sched_do_timer' 'blk_mq_run_hw_queue' 'rcu_gp_fqs_loop' 'ext4_mb_good_group' 'list_lru_count_one' 'fsnotify' 'xprt_connect' 'xas_clear_mark' '__skb_try_recv_from_queue' 'file_remove_privs' 'ep_poll' 'd_instantiate_new' 'shmem_add_to_page_cache' 'kernfs_fop_open' '__ext4_new_inode' 'clean_buffers' 'do_syslog' 'alloc_empty_file' 'echo_char' '__dev_queue_xmit' 'balance_dirty_pages' 'snd_seq_check_queue' 'snd_seq_prioq_cell_out' 'ktime_get_seconds' 'find_get_pages_range_tag' 'timer_clear_idle' 'fasync_remove_entry' 'lookup_fast' 'ktime_get_ts64' 'do_mmap' 'pipe_poll' '__dentry_kill' 23:50:02 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100000, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x3, 0x6}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={[], 0x6, 0x4, 0xa4, 0x0, 0x0, 0x2000, 0x4, [], 0x6}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x646300, 0x0) r2 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0xfff, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000002c0)=0x8, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200640, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000340)) ustat(0x6, &(0x7f0000000380)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000440)={0x7, 0x7, 0x4, 0xe000, {}, {0x5, 0x0, 0x0, 0x5, 0xb1, 0x1, "bc28721e"}, 0x1, 0x3, @fd=0xffffffffffffffff, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) dup2(r5, r6) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000540)={{0xe, 0x1}, 0x8d, 0xffff, 0x3, 0x101, &(0x7f0000000500)="23ed1e"}) r7 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0xa8, 0x200000) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000005c0)) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000600)=0x2) r8 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000640)={0x1f, 0x14, [0x9, 0xfffffe00, 0xb039, 0xffffffff, 0x7]}) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000700)={'\x00', 0x4ca}) syz_read_part_table(0x10000, 0x5, &(0x7f0000000a80)=[{&(0x7f0000000740)="80ed6841fa7825b0f7decf8a826b0b2374d32e702b15fc7ad54dfa6ea50b4e73bab034a258180b33be1caebfe057d218d17f2ed9f0efd5f73301d3bd92e0295984681c03c897f878aba18fdddbdbd96945a455a7e678679a850a8774f7fdc0389f51c9ef81de91066dc04cf280f6fe1b07876ad0a0a508ade450b21f4ed5e60f1115", 0x82, 0x7}, {&(0x7f0000000800)="3d2418982042d5e592db4343a01461ae52aa351c6dde3c8c19b5f044960999b52465e6a2f11101f7ad133caa72075a102fc1e0581f1213aafc899ec3a909abecc14fe3481038c9e4b8ea4f24ef3948399961cb13a75bfd9027cfbb3810e1f17569f25e14833157ac7a7eb1630ba60c460c453527e23a1b7a6acf55532936a7285e350a3f454e0fd666c582e375b015591fdbf189df8fbaaffb038af9d256ddca7a", 0xa1, 0x524}, {&(0x7f00000008c0)="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", 0xfe, 0x1f}, {&(0x7f00000009c0), 0x0, 0x3de4}, {&(0x7f0000000a00)="3a06f5dfd279eb2d65621cc3f3fc1aba41e5a8b9c7fd9b2e9bc75ea000210877465600af0c7e4119b9f4123e8e74a7f40da7bb5d33e997f3aef820f6d06c2177917c7a826f90", 0x46, 0x8}]) io_setup(0x1ff, &(0x7f0000000b00)=0x0) io_destroy(r10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000d00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000b40)=[{0x20, 0x0, [0x9, 0x51e, 0xfffffffe, 0x10000, 0x40000000, 0xa4ac, 0x10000, 0x2, 0x2, 0x2, 0x9, 0x2, 0x0, 0x7f00, 0x1000, 0x40]}, {0x94a8a5dd2c3e7799, 0x0, [0x59a8, 0x3f, 0x1000, 0x6, 0x400, 0x3, 0x1f, 0x1ff, 0x280000, 0x2, 0x8, 0x8, 0x8, 0x3f, 0x9, 0x1]}, {0x8, 0x0, [0x9, 0x0, 0x6, 0x80000000, 0x7fff, 0x358, 0xbca, 0x6, 0x8f3ed65, 0x1, 0x1, 0x2, 0x80000000, 0x2, 0x1, 0x1f]}, {0x0, 0x0, [0x2, 0x2, 0x7fffffff, 0x2, 0x9, 0x101, 0x3, 0x5, 0x4, 0x5, 0xd88, 0x0, 0x4, 0xff, 0x0, 0x5]}, {0x10, 0x0, [0x8, 0x3, 0xffff, 0x2, 0x7, 0x40, 0x9, 0x8, 0x7f, 0x5, 0x7fffffff, 0xd17, 0x2, 0x89, 0x0, 0x7fff]}, {0x8, 0x0, [0x20, 0x9, 0xe0000, 0x3, 0x8510, 0x7, 0x1, 0x8f, 0x4, 0x2, 0x2, 0x3, 0x2, 0x2, 0x80000000, 0xfffffff8]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) r11 = add_key$user(&(0x7f0000000d40)='user\x00', &(0x7f0000000d80)={'syz', 0x1}, &(0x7f0000000dc0)="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", 0x1000, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001dc0)={r11, 0xe, 0x88}, &(0x7f0000001e00)={'enc=', 'oaep', ' hash=', {'md5-generic\x00'}}, &(0x7f0000001e80)="426ae022677cff9b3a9b4848f0f8", &(0x7f0000001ec0)="547ee9693c6a79740e201e6e427958719e2bc5c6c57b5b3caa03de14bffdb6a9ceed84b0b3cb3a667103055451ce7184ea2b559dfae600a58f498447d8f9ac6d843d9a5b5d78f929608d8cdeba77bb4055c20524b75e2c8107ac294e423fe3f87291db6c627f7e5791ae90cc946cd544a399ce424f314509a38bdbb721ccd13f4a75525eab5f809d") ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f0000001f80)) r12 = syz_open_dev$admmidi(&(0x7f0000001fc0)='/dev/admmidi#\x00', 0x9, 0x120200) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000002040)={0x6, &(0x7f0000002000)=[{0x8, 0xc0, 0x5, 0x7}, {0x20, 0xe1, 0x1, 0x2}, {0x4, 0x1f, 0x40, 0xa0}, {0xf53, 0x4, 0xd3, 0x6}, {0x6, 0x9, 0x3f, 0xfff}, {0x6a5b, 0x0, 0x9, 0x6}]}, 0x10) [ 331.988893][ T7922] IPVS: ftp: loaded support on port[0] = 21 23:50:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x48a000, 0x0) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e20, 0x1f, @mcast2, 0x1}, {0xa, 0x4e24, 0xfffffffb, @rand_addr="0d7d9a48b89d56b39d7e0dfd0236c227", 0x1}, 0x20, [0x55a1, 0x75c, 0x3f, 0x8001, 0x8, 0x1, 0x2f1, 0x9]}, 0x5c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x109042, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000001c0)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipx\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000340)={0x2, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000380)={0x4, r4}) r5 = accept4$tipc(r3, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10, 0xc0400) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x105200, 0x0) dup3(r5, r6, 0x180000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r2, 0xa6d9d000) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x11) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000480)="9425ab678be5b996141296982c9adbe074b2e75c2e72f5f6a2474389f2e3c27de4502b42bbfb") r8 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000540)) clock_gettime(0x7, &(0x7f0000000580)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)=0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000640)={[], 0x3, 0x3813, 0x7, 0xfffffffffffffff7, 0x2, r10}) r11 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r11, r12) r13 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, &(0x7f0000000740)={{0x0, 0x5000, 0x14, 0x1, 0x7f, 0x91, 0x80, 0x2, 0x7, 0x7, 0x1, 0xbd}, {0x4, 0x5000, 0x0, 0xc9, 0xa1, 0x9, 0x1, 0x6, 0x1, 0x6, 0x7f, 0x3}, {0x3000, 0x0, 0xb, 0x7, 0x4, 0x40, 0x81, 0x5, 0xe7, 0xf9, 0x2, 0x3f}, {0x1, 0x10000, 0xe, 0x7f, 0x20, 0x9a, 0x40, 0x3f, 0x80, 0x3, 0x6, 0x1}, {0x5000, 0x9000, 0x0, 0x4, 0x5, 0x1b, 0x1, 0x8, 0x8, 0x4, 0x40, 0x1}, {0x1, 0x25db0374d31d61f7, 0x0, 0x0, 0x7, 0xff, 0x1, 0x1f, 0x0, 0x0, 0x4, 0x20}, {0x2000, 0x100800, 0xbac582120850fb5e, 0x9, 0x7, 0x1, 0x6, 0x7, 0x5b, 0x3f, 0x8, 0x8}, {0x4001, 0x0, 0xe, 0x6, 0x7f, 0x80, 0x3, 0xff, 0x5, 0x4, 0xff, 0x71}, {0x1000, 0x1000}, {0x7800, 0xf000}, 0x4, 0x0, 0x0, 0x80, 0xa, 0x100, 0x10000, [0x7cd, 0x2b0, 0x9, 0xffffffffffffffc0]}) [ 332.093014][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 332.165609][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.179984][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.199852][ T7922] device bridge_slave_0 entered promiscuous mode [ 332.211383][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.218482][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.240661][ T7922] device bridge_slave_1 entered promiscuous mode 23:50:02 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x400) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x30}, &(0x7f00000001c0)=0xc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x404001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x5, 0x1, 0xffffff81, 0x962b, 'syz0\x00', 0x7}, 0x2, 0x2, 0x7, r4, 0xa, 0x200, 'syz1\x00', &(0x7f0000000280)=['/dev/btrfs-control\x00', '/dev/snd/pcmC#D#p\x00', '/dev/snd/pcmC#D#p\x00', '\x00', '{posix_acl_access#)!\x00', 'GPL\x00', '/dev/snd/pcmC#D#p\x00', '\x00', 'em1\x15wlan1\xac\x00', '/dev/snd/pcmC#D#p\x00'], 0x81, [], [0x0, 0x6, 0x8020, 0x6]}) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000480)="5e7bae5219ccac2bf6a7d8caac63b7699c3573758a8c080c200b10cbbf54efaeac29ee501269d821d2ac8d22073376b17f59e8f78997d2fcc2af931ce362312ae6d3695ef580573cb731f85a06a50de5513c2df466a4927a17ba68595a5df63830a12d0a0717c09254844500f28e6fc8175b4b32c5cb56e604deaeed8f4f877028c7caaff4f4bcf5bb640aa15e3d5de7d0aa99fbbe72e913ea1a8c31a4841468b78c161279ea30efd053fa0b192178597c937c5b5da46c3689ef", 0xba}], 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x0, 0x6e, "c3acc83f33bb9aa9a6c31a5db07a0f0285aca920a421f2d6d61c9e5c9e00d5914f0fbff57843a96c14037f2607075472c153b9d9ad36dcb34d6d3a26a6b0671ec6c8c2c6daf112013a4c49bdaefcd34462f1a6567fbe412b674aee965bae8e800c93da11d3a7ee53795fec63cc1c"}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000640)='trusted.overlay.origin\x00', &(0x7f0000000680)='y\x00', 0x2, 0x1) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/autofs\x00', 0x200, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)={&(0x7f00000006c0)='./file0\x00', r5}, 0x10) r6 = syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x3a, 0x42101) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000800)={0xfffffffe, 0x1, 0x36, &(0x7f00000007c0)="537c3fd355891129f73cb66201ac730bf607d8b047d7c7cf97a3422cedb347257b934667770fb68d521f877f7ba0bf8aaa8170f42dac"}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vhci\x00', 0x620000) lsetxattr$trusted_overlay_upper(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='trusted.overlay.upper\x00', &(0x7f0000000900)={0x0, 0xfb, 0x92, 0xc, 0x7, "df21e6ee0d4a6fd06227f41bd98822a4", "3abafb95ae12fe8c4d81e92d1aa66e555a694dc6430daeb509469e74ccea8677d4e96503226cbf556b3d2096ddefd8c0e6045199f610e6f002946427f285ea3aa2d85ab536282de4edd2c36c84275cb0cff3612dc23f78b0696de936552b314f3ecad516d8fac932c2204fa6dbca59ffaadca4faed6ee95fe3ec19a737"}, 0x92, 0x1) r7 = syz_open_dev$adsp(&(0x7f00000009c0)='/dev/adsp#\x00', 0x3, 0x100400) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000a00)={'bridge_slave_0\x00', 0x2}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000a40)=0x3) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000a80)) r8 = syz_open_dev$midi(&(0x7f0000000ac0)='/dev/midi#\x00', 0x8, 0x2000) write$P9_RCREATE(r8, &(0x7f0000000b00)={0x18, 0x73, 0x1, {{0x4, 0x0, 0x6}, 0x1}}, 0x18) r9 = fcntl$dupfd(0xffffffffffffffff, 0xc85b9404cfae6d0c, r1) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000b40)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sequencer\x00', 0x228482, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48ae172bfef28fc8}, 0x10040) r12 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/self/attr/current\x00', 0x2, 0x0) flistxattr(r12, &(0x7f0000000d40)=""/164, 0xa4) [ 332.271369][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.292133][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.307711][ T7926] IPVS: ftp: loaded support on port[0] = 21 [ 332.334793][ T7922] team0: Port device team_slave_0 added [ 332.361331][ T7922] team0: Port device team_slave_1 added [ 332.493536][ T7922] device hsr_slave_0 entered promiscuous mode 23:50:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x5) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xfff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000280)) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x2080, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/244) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x20) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x400, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000580)={0x0, 0x8, 0x3046c00000000000, &(0x7f0000000540)=0x34}) r10 = syz_open_dev$vbi(&(0x7f0000000c40)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000c80)='tls\x00', 0x4) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x4ff) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000002100)='/dev/audio\x00', 0x0, 0x0) connect$bt_l2cap(r11, &(0x7f0000002140)={0x1f, 0x2, {0x80, 0x1, 0x0, 0x7, 0xf8, 0x8}, 0x4, 0x4a}, 0xe) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002180), 0x4) ioctl$KDSETLED(r8, 0x4b32, 0xff) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0x94, r12, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8004c) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002380)='/dev/video35\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r13, &(0x7f00000023c0)='trusted.overlay.redirect\x00', &(0x7f0000002400)='./file0\x00', 0x8, 0x0) r14 = syz_open_dev$radio(&(0x7f0000002440)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000002480)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r14, 0x40086409, &(0x7f00000024c0)={r15}) [ 332.580154][ T7922] device hsr_slave_1 entered promiscuous mode [ 332.692507][ T7928] IPVS: ftp: loaded support on port[0] = 21 [ 332.866374][ T7930] IPVS: ftp: loaded support on port[0] = 21 [ 332.934231][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.941357][ T7922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.948854][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.955978][ T7922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.069064][ T7926] chnl_net:caif_netlink_parms(): no params data found [ 333.082178][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state 23:50:03 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x101000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000140)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)='A', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000001c0)) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7, 0x200) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000240)={"ccfccc62bcdf9826362a2d060a27b1cef0da8ddc6185393aaeba8cb4b00b6e46a0d881a87783ca806626750a9d92a6d577999909891565a1cb060c676463850ba63655b01ac753486c364ce64d82e1969ff38f36de6ae225e3bc9220f5a99aff726719efd588661d516ce9cddb1c97d95dbffb18c526a89693ac78cd5db5847346208315dc7e7a1605f229e494a075c375912dce6c0e77a7b32770cf83f2df7cc593045bc35df79157db6c67a413a75f42374dd4e706a14675381825fa2fa113c4cd68d367f7ac1ea52976356abbe1cf2b7a88e0e51b8729cb00724e3236c555730cf1132eb1ae96906b537dd62c079743579f980d1226ab13090e80b0ddf5761da43dfd06fb8073ccc8367458c1e52c2c91e1818162f96856675a957878613ec30d29cbafe47c008fbcb9a1e360a36dcf21977efb6afe24dfb0868d34d2efd9fa564426aaf8593d66e871d3f0dd31209ac1986fc915cdee60e9b9290d06e0f1083b56c53ae345d629e5a9e4b7ef895f12c75725849092fe45eb563a685d45ef6710b23eb6fe2ff8262e82d09310c80988ca4dcfb983be838796e14d814644e9ec89e0107497948bff1ceb16ccfac21b7fdea8ba66209e9bb8e9352563ac86d7890a8d59e9b387a3f8c4fa7ae92f7a96a99ee44abfd17b2d397bbcf36b09e1ec2454bcff5f61b0d9c6f1fd2964606bd851828bd529cffa30dd4d59aa1164bb45828794760541624264c5f1911335509cedaae8cffb45e420dae3757e0c3642c82ad97ef7a3dc943ac8579b687c7abae6cce3f3cfb5e3f4e1c39ffc856c929eb80939dda1e1b10583a3ba0a838f063bd9506ed6ae9c49f7e18bc7265ef4614dfd1d6623544f613b03198ef0c451bfd5d1cb9517b84a741df390b6995aef25352a379470cea84f11f825baf5f4cc0e32bc8900193c531c9ffbff3296e633181c6e40dd7b67970dcb2abad37d2ed063dde3dd7cbfbf7b56bc7848913ce0c066f9348298ce7d43cd3df008a2b71042fb86e49684235280914a1a50709257306ea3c1b72db3c1c83ae7811f62605194e1cd567d5223280ed709640037c1811b43dc316c56dd4e332161520b49b4fdbeb9c4fd7dd05b7b7ca687d77b7cebecc0b5491469557e50c6a764894a5118e039ed066e43b3b964132b065f3a3aa5cd9f42d02ef3bdf72281637a844c161cd3b27329e210a8d2eab4085d188cb13abb60857c587e8d6cdca91dbcc3aac23c7f20d98d798effe8a5b748ca916a7424693db2fe98dff560c79dc675adaf49577dbb9393044bcf136c39a773f0a8ac4829c7bce82d13cd27c434ad5a06e3710686c46439b630d84c447c64fc2c1473fd8a35b054e61f3441f9a2c02ce55df176f4cf49c50bfcdabe530ed5cc82db5edd1f6e87eaedf449c3da51af8a7049d3402568f8782b8b04fc6d4487bd6f1801b0e298d8caba"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) flistxattr(r5, &(0x7f0000000640)=""/16, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000680)) r7 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0xe1bb, 0x0) getsockopt$packet_buf(r7, 0x107, 0x1, &(0x7f0000000700)=""/26, &(0x7f0000000740)=0x1a) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000780)=0x19) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000007c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @empty, 0x3}, {0xa, 0x4e21, 0x10001, @mcast2, 0x7}, r8, 0xff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000a00)=[{&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000980)="cffbe81162561d542d", 0x9}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x8000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x6, 0x9}, &(0x7f0000000a80)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000ac0)={r10, 0x6, 0xffffffe0, 0x7fffffff}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x2, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000b00)={0x0, 0x2, 0x4, 0xfffffffffffffff9}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r11 = syz_open_dev$midi(&(0x7f0000000b40)='/dev/midi#\x00', 0xc08, 0x101900) fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, &(0x7f0000000b80)='/dev/video2\x00', &(0x7f0000000bc0)="28050413b97e4d093c88788ecdc64253cd9fa187a47fe7fb6b367cc5209c7eb3edc73dc96a03043bc58bbf81b8230f861887e7bf007a35bbd1e66b0d710ab788abbdcc8ed37ce3b4258c8773f446792616f54f697f8038383c5c450f1224fd7c58b7c9e66e905dad5b15c508c625e1c9ef39a80a88f0d4758bf15606f9e4e47049d289de6d750047a36115dcfe8a52e36d6406f37407f9ad09bfccb3dae20f1511769f84fb1a6616ce584115d2bac451f78efba9667ed9773b9890554be8f7773bc6eb402065319a5bdadc7798c0", 0xce) prctl$PR_SVE_GET_VL(0x33, 0xa0f9) [ 333.110926][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.308257][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.353240][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 333.384552][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.401244][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.439857][ T7926] device bridge_slave_0 entered promiscuous mode [ 333.476491][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.495970][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.510857][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.542361][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.549488][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.590589][ T7926] device bridge_slave_1 entered promiscuous mode [ 333.645768][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.655740][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.692279][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.699687][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.740396][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.772443][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.800491][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.807779][ T7956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.850325][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.916768][ T7961] IPVS: ftp: loaded support on port[0] = 21 [ 333.922476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:50:04 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x10, 0x1}, 0x1}}, 0x18) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x20, 0x0, 0x8}, 0x5}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc576d1fd6a737cdc, 0x5, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x0, 0xb, 0x4, 0xb, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88cd}, @call={0x85, 0x0, 0x0, 0x41}, @jmp={0x5, 0x0, 0x9, 0x7, 0x6, 0x4, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000140)=""/4, 0x41100, 0x2, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x40, 0x5}, 0x10}, 0x70) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r3, 0x1, 0xa26e, 0x8000}, &(0x7f0000000380)=0x10) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000400)=0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x10001}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xb5}, &(0x7f0000000580)=0x90) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000005c0)=0x9) set_tid_address(&(0x7f0000000600)) init_module(&(0x7f0000000640)='syzkaller\x00', 0xa, &(0x7f0000000680)='/proc/capi/capi20ncci\x00') r6 = syz_open_dev$media(&(0x7f00000006c0)='/dev/media#\x00', 0x5, 0x40) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000700)=0x14) clone3(&(0x7f0000000980)={0x48818059d1f85c43, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0), 0x1, 0x0, &(0x7f0000000800)=""/182, 0xb6, &(0x7f00000008c0)=""/151}, 0x40) r7 = dup(0xffffffffffffffff) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/hwrng\x00', 0x240000, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000a40)={0x6000, &(0x7f00000009c0), 0x0, r8, 0x1}) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000ac0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000c00)={&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000b40)=""/145, 0x91}) r10 = openat(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0x22000, 0x80) ioctl$KVM_ARM_SET_DEVICE_ADDR(r10, 0x4010aeab, &(0x7f0000000c80)={0x24}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/video36\x00', 0x2, 0x0) r11 = syz_open_dev$radio(&(0x7f0000000d00)='/dev/radio#\x00', 0x3, 0x2) bind$pptp(r11, &(0x7f0000000d40)={0x18, 0x2, {0x0, @rand_addr=0xfffffffe}}, 0x1e) r12 = syz_open_dev$midi(&(0x7f0000000d80)='/dev/midi#\x00', 0x7fffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r12, 0xc0a85322, &(0x7f0000000dc0)) [ 333.959500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.005033][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.053017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.080539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.112627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.142592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.170591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.202366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.230892][ T7930] chnl_net:caif_netlink_parms(): no params data found [ 334.254938][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.315558][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.331171][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.338385][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.368882][ T7928] device bridge_slave_0 entered promiscuous mode [ 334.392156][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.412478][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.419693][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.440751][ T7928] device bridge_slave_1 entered promiscuous mode [ 334.468180][ T7967] IPVS: ftp: loaded support on port[0] = 21 [ 334.470619][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.499500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.510600][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.545703][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.563990][ T7926] team0: Port device team_slave_0 added [ 334.579045][ T7926] team0: Port device team_slave_1 added [ 334.595698][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.609861][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.653695][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.661094][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.668712][ T7930] device bridge_slave_0 entered promiscuous mode [ 334.682234][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.689376][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.697370][ T7930] device bridge_slave_1 entered promiscuous mode [ 334.752496][ T7926] device hsr_slave_0 entered promiscuous mode [ 334.810315][ T7926] device hsr_slave_1 entered promiscuous mode [ 334.879919][ T7926] debugfs: Directory 'hsr0' with parent '/' already present! [ 334.907685][ T7928] team0: Port device team_slave_0 added [ 334.951471][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.997173][ T7928] team0: Port device team_slave_1 added [ 335.011312][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.135595][ T7930] team0: Port device team_slave_0 added 23:50:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000240007377f4da1a10516100000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000c00000040b1080009000000000008000b000002000008000a0000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed81891f79dc1621c255faf05c9f3d17da76f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0) [ 335.208674][ T7930] team0: Port device team_slave_1 added [ 335.272324][ T7928] device hsr_slave_0 entered promiscuous mode [ 335.310471][ T7928] device hsr_slave_1 entered promiscuous mode [ 335.349865][ T7928] debugfs: Directory 'hsr0' with parent '/' already present! [ 335.372947][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 335.596450][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.629893][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.637990][ T7961] device bridge_slave_0 entered promiscuous mode 23:50:05 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x3, 0xfd) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 335.793676][ T7930] device hsr_slave_0 entered promiscuous mode [ 335.900052][ T7930] device hsr_slave_1 entered promiscuous mode [ 335.953128][ T7930] debugfs: Directory 'hsr0' with parent '/' already present! [ 335.994414][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.008100][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.053549][ T7961] device bridge_slave_1 entered promiscuous mode [ 336.110704][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.312288][ T7967] chnl_net:caif_netlink_parms(): no params data found [ 336.412831][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.542477][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.591107][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.113932][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.126158][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.204286][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:50:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000040)) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) rmdir(&(0x7f0000000080)='./bus\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) r4 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4], 0x9d) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./bus\x00', &(0x7f0000000380)='9p\x00', 0x200000, &(0x7f00000003c0)={'trans=unix,', {[{@posixacl='posixacl'}, {@aname={'aname', 0x3d, ')'}}, {@access_client='access=client'}, {@cache_mmap='cache=mmap'}, {@access_any='access=any'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@loose='loose'}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}}) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r5, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 337.277432][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.370200][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.377623][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.496132][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.601260][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.609763][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.616857][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.774370][ T8072] 9pnet: p9_fd_create_unix (8072): problem connecting socket: ./file1: -2 [ 337.880020][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.888023][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.964481][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.034432][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.049153][ C0] hrtimer: interrupt took 50006 ns [ 338.144605][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.237089][ T7961] team0: Port device team_slave_0 added [ 338.255862][ T7926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.401968][ T7926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.508250][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.552612][ T26] audit: type=1800 audit(1573429808.736:31): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16522 res=0 [ 338.578369][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.609795][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.699961][ T7967] device bridge_slave_0 entered promiscuous mode [ 338.750994][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.759097][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.870023][ T7967] device bridge_slave_1 entered promiscuous mode [ 338.925274][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.000919][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.020476][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.029409][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.152612][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.204551][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.284154][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.325302][ T7961] team0: Port device team_slave_1 added [ 339.377839][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.424978][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.478607][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.490445][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.498329][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.579961][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.620231][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.772289][ T7961] device hsr_slave_0 entered promiscuous mode [ 339.810156][ T7961] device hsr_slave_1 entered promiscuous mode [ 339.849790][ T7961] debugfs: Directory 'hsr0' with parent '/' already present! [ 339.865332][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.911358][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.029303][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.044016][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.081606][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.102032][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.109164][ T8074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.203273][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.250454][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.284931][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 23:50:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x3fffffff}}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0xec) sendfile(r0, r1, 0x0, 0x666b) sendfile(r0, r1, 0x0, 0xa195) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x341001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000600)=']vmnet1[\'\x00'}, 0x30) pipe2$9p(&(0x7f0000000680), 0x80800) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x140000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000700)=0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r7 = geteuid() r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r10 = getegid() fcntl$getownex(r8, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r14, 0x0, r15) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r10]) write$FUSE_ATTR(r6, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r7, r10, 0x8001, 0xd2f}}}, 0x78) r16 = getpid() sched_setscheduler(r16, 0x5, 0x0) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r21 = geteuid() r22 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r22, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r24 = getegid() fcntl$getownex(r22, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r28, 0x0, r29) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=0x0, @ANYRES32=r24, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r25, @ANYRES32=0x0, @ANYRES32=r26, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r27, @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r24]) write$FUSE_ATTR(r20, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r21, r24, 0x8001, 0xd2f}}}, 0x78) r30 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r30, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r30, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r30, &(0x7f00000001c0), 0x400000000000150, 0x0) r31 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r31, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r31, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r31, &(0x7f00000001c0), 0x400000000000150, 0x0) r32 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r32, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r32, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r32, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001340)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000001440)=0xe8) r35 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r36 = geteuid() r37 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r37, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r39 = getegid() fcntl$getownex(r37, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r43, 0x0, r44) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=0x0, @ANYRES32=r39, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r40, @ANYRES32=0x0, @ANYRES32=r41, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r42, @ANYRES32=r44, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r39]) write$FUSE_ATTR(r35, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r36, r39, 0x8001, 0xd2f}}}, 0x78) r45 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r45, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r47 = getegid() fcntl$getownex(r45, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r51 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, 0x0, r52) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=0x0, @ANYRES32=r47, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r48, @ANYRES32=0x0, @ANYRES32=r49, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r50, @ANYRES32=r52, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r53 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r54 = geteuid() r55 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r55, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r57 = getegid() fcntl$getownex(r55, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r61 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r61, 0x0, r62) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=0x0, @ANYRES32=r57, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r58, @ANYRES32=0x0, @ANYRES32=r59, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r60, @ANYRES32=r62, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r57]) write$FUSE_ATTR(r53, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r54, r57, 0x8001, 0xd2f}}}, 0x78) r63 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r63, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r65 = getegid() fcntl$getownex(r63, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r69 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r69, 0x0, r70) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r64, @ANYRES32=0x0, @ANYRES32=r65, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r66, @ANYRES32=0x0, @ANYRES32=r67, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r68, @ANYRES32=r70, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x6, &(0x7f0000001480)=[r39, r49, r57, 0xee01, 0x0, r70]) r72 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r73 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r72, &(0x7f0000000600)='4', 0xec) sendfile(r72, r73, 0x0, 0x666b) sendfile(r72, r73, 0x0, 0xa195) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r72, 0xc0502100, &(0x7f00000014c0)={0x0, 0x0}) r75 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r75], 0x9d) fstat(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = getpid() sched_setscheduler(r77, 0x5, 0x0) r78 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r78, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r78, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r78, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r78, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) r81 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r81, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r81, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r81, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000016c0)={0x0, 0x80000}) r82 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r83 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r82, &(0x7f0000000600)='4', 0xec) sendfile(r82, r83, 0x0, 0x666b) sendfile(r82, r83, 0x0, 0xa195) openat$cgroup(r82, &(0x7f0000001700)='syz0\x00', 0x200002, 0x0) r84 = fcntl$getown(0xffffffffffffffff, 0x9) r85 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r85], 0x9d) r86 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r86, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r88 = getegid() fcntl$getownex(r86, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r92) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r87, @ANYRES32=0x0, @ANYRES32=r88, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r89, @ANYRES32=0x0, @ANYRES32=r90, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r91, @ANYRES32=r92, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r93 = getpid() r94 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r94], 0x9d) r95 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r95, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r97 = getegid() fcntl$getownex(r95, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r101 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r101, 0x0, r102) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r96, @ANYRES32=0x0, @ANYRES32=r97, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r98, @ANYRES32=0x0, @ANYRES32=r99, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r100, @ANYRES32=r102, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r103 = getpgrp(0x0) r104 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r104, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r104, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r104, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r104, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r106 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/snapshot\x00', 0x80000, 0x0) r107 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r108 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r107, &(0x7f0000000600)='4', 0xec) sendfile(r107, r108, 0x0, 0x666b) sendfile(r107, r108, 0x0, 0xa195) ioctl$TIOCGPGRP(r107, 0x540f, &(0x7f0000001800)=0x0) r110 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r111 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r110, &(0x7f0000000600)='4', 0xec) sendfile(r110, r111, 0x0, 0x666b) sendfile(r110, r111, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r110, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000001940)=0xe8) r113 = getegid() r114 = getpid() sched_setscheduler(r114, 0x5, 0x0) r115 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r116 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r115, &(0x7f0000000600)='4', 0xec) sendfile(r115, r116, 0x0, 0x666b) sendfile(r115, r116, 0x0, 0xa195) getsockopt$inet6_IPV6_XFRM_POLICY(r115, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000002e00)=0xe8) r118 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r118, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r120 = getegid() fcntl$getownex(r118, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r124 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r124, 0x0, r125) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r119, @ANYRES32=0x0, @ANYRES32=r120, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r121, @ANYRES32=0x0, @ANYRES32=r122, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r123, @ANYRES32=r125, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r126 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r126], 0x9d) sendmmsg$unix(r0, &(0x7f0000002bc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="34f203822029f46610249e00fd1b72667cc85610f840cc7cd0292de98097439ceca3bafb07b9909c7294c1f2235997454d0e42573f17150910d88a1fd146e8168db18f5dcf80ccd8ff4f78346f9472b032d8710a9149a1d993a761d476bc546d87ab819b6328bb701ee975155334ded013b706a52ac595de95dd1ff1644fee01684f9ae3ed585afe1906c09e88d4e59c2bf5d005806e0779623a858e62bd562fb2b11501388308fe85104a1d5afddbdf12dbb65ebeb0153c2cf42c", 0xbb}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="9e10f51923022fb69e0d3b18aa98e2b60d172cc754fc862ec89cfe6a9003d9d08da439ce68c77126e6fba4245cf0c8eb24014932dc0ea150e1eb8a111e5821f0a5d8f6a51f0bfece93792caab8cc8a9095951ab13cb3dfa447d33ffc21be6439f13d0222b4aa140bec2e2a6af6e8f62db13041d791d11f44fca28dc38d2f58290da776", 0x83}, {&(0x7f0000000380)="9d2c24cf37cd0f76c96b75ce35b53566f42678f2632b2bf8e8452165abd3760491e0f84146e635c82abd6f34a3feb84825b4557a5dac90c6811f1d8bab38e189c46f435de0bbd5d5b883e2d75bda26b21d220d", 0x53}, {&(0x7f0000000400)="727775056a37a6394d930457e90c5072bc59a27dd00629ec3552e9527e3b80aa8b3fd7143f2dd329fb3363ffa5105ac5c7d08d1be1c28155ea47067a8ce27d1ea85ee198782422e331834e67ba759bfb723aa6685bafe9aabbfb1db1447b681a5b77", 0x62}, {&(0x7f0000000480)="4300ff7ddf59eb44f4668050390c93662f928d7a26275491bccbcbb00b7ca0b8619e536ea762875cd4fa061146498c18f54db42f8d98a8b757623fa25dbdd2d1b370305e4b29a67a8615867ec1225cab2ed16a15a9773b2d22eaa9348b3f207b6d0e0131058f2210f88aa6c8179ba240281f3b6fe89853d31c9bde2c83d76d15ae4cb908c921b0d427c045c31e77117cec0c7711e0d93ca4b3f1526c07ae2a8e7320fdb3ba597ff684453acff923f7a0ce5f61a96b7c796d3d41", 0xba}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r114, r117, r125}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r10}}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r24}}}, @rights={{0x14, 0x1, 0x1, [r30]}}], 0x78, 0x40000}, {0xfffffffffffffffd, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000980)="debd106ee1222bb9fc641ea1a04ae0b32886c20513be5c8b3143c9994df66845fca231b82f1a789c772f5440daaaae73939de4323f3b65693b27dc73a7fb979bff5db34352aa4866660db0f6549fe29f08d2b1ac4546fc762dd76ebd80ea0479d0e9649c381918025f151aed1f1baca0e7a4ee149641a6e21b245b6045af8a98eec2539e466ea56e", 0x88}, {&(0x7f0000000a40)="7293c4a5dcbd96f705650cbdffb4af2c8cdeb335", 0x14}, {&(0x7f0000000a80)="2835887c2e7f68c9d0c6c0d86b89058ff3d9e565b0222540a744791610751d35b390493b4b6aba1dd7e4741c84e2f4d3e50c3db56564901eaa5faa1a997c29522378761dbb3bf7f7dc", 0x49}, {&(0x7f0000000b00)="3c8633442ba5a200f84e4f7c628b0fa6aa46eaffcd58e41375d55e7382e85160efc3d2ad59b11936fb54519a5172a3ef5967ec", 0x33}, {&(0x7f0000000b40)="99a796d6ddb5cbd68ba4c8a3f4f68e08321272f2b6470d59e74c89706d9cb88b089cc6a04d996f5cd178eb6e344f658728f957b4e787bdd0b281803fc4ad227de4e822e9c8af15dcefeb9214446d4fce3b1578e1ea5df377afc3e4c171b0536aec0e4cd4d5a03020918b3aad7e6d46c1036a6969bb4aa62b2e9890dd50e422f46127f14b14620e20b44f386c75e96eed03c1be011c0f6680896bedf38af0a2c1c6185d475fb535f52f6d69e1764de31e21a276fe287396a16c067e0ad9d7fe3addf2ba3f0fc4320059795b31b7e9c5442943aa608ab3a57abd6ffbaba9533e04fcff8c10144ea9e130a734dc2701659251739fa6", 0xf4}, {&(0x7f0000000c40)="32b801784fbdaff81821331ee4865936a4d69d02983bbe8b0e0ca4bdce67fedb96bb2fe2f82b1cb5eff8fd3626a268f3aa77b96e569b432850b51ca35210b14119f93b00ca2c44bd46a954b3531806295d1a9234a8c586b2353c4174532c914962d257318eb676267fe9b4b2f0103e9ece215e37775f55e292a5527887fcb114d81c2826390b31b1986c4cd0cf776b41fbcb113799af0290683a5e9d1f22831f8e0bb8c80855d986a7071cc31d1637fd859b360bd597790539036dfb786bbb167aa5ba0657a4caec2a8cc7117d6a3ce529", 0xd1}, {&(0x7f0000000d40)="3ba0d1dd63469bf16eef3c5011b48f57d27adf1e4dc058c2132a5a7a655229f8013b9c2c246aac22b151bb9322f7411c5112da92afce9dde5ac3cb66464f3ce36c23a3bb36cd8697ae0230b8e0be6f1a2bea5e37012bc7dfb5c6443fdcc9f7b6163c57c158f0f14c86a204f4025021ff5855689b0c632bf202c69399927ae8ffd37885f6d77da5a905ee6a78cc4c74fa2170a27a4bddd2185108f868d5079bfb2584457f59925ba669371d98851aaacea51318e1eb2f6bf2c5216c0de55007975b8870b9d992c300b857343bf37c4b51fb46d17f75515c4765cf385f0e799dcd0d76", 0xe2}], 0x7, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r31, r32]}}], 0x18, 0x4008410}, {&(0x7f0000000f00)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000f80)="6f9566eb90acd9423679537d12a78cbbc132c94fed8feacf9ee83fd9ad91dc32b45c1610ad1278f5cd81a015deceff05d386f0f680eda34d1ff136e8af7fdfc3bba68fb2f42752cd80218e826bc13caede324dbf1cd25d1a9f66d1da4f22d0fe7d98928a79499e4f68d82a84675dec2a8a7e311a2eca", 0x76}, {&(0x7f0000001000)="6446c15495e4dcafa1f82275502f6711af911cb30b542b4290aa058b024dd6ec2ab96c98c5b9a5fc9e46eda7f704948f1f6a66e67a4594a5317514e4b9704b0770f20caab7f9897092fd0352cf1c194145677a2aa47a5b1baef5e31885c4c2f407ed2a46af984396da98aedcf33c582e7bda9d0ef66c2781eea0c1e936d2a6846e4a2d0158401cbea9891233a94a", 0x8e}, {&(0x7f00000010c0)="3fcf2ea987a05e97724d5ce12ab718cd6ad886edb7cb93b93838524b3f363be792b51a09be0070e4a8a6aab61edc1d8f6d63e37a3d429b550bbbac38c437df32f6d01178a1198dd7e325b613", 0x4c}, {&(0x7f0000001140)="58d165efc9fa63528ca7765d5019717067552d9dd54ffcfc00c18494478323ef657306979effc4106dbd0462a96d4b552dc9de253dc0a3dbb50f0354e83ba967db5cc5a17b0ab7dde31cea674b250137bb32eeed7d9673082caf02db080a6076e5ffae6dc8ea543b710b2708cf8ed3a71657ed1e2d41e46f1cd870809b67e3e20479", 0x82}, {&(0x7f0000001200)="7787e1eac1559e0997f33631f7a3a56a56c544c76952c1870af867d6ec7ac87eb864df43360b4d9fe96f30f9d669751aff08dd549c5187705ad5f4e31acc4eaeb42df6e755b8b9bfab8ed7176bac9bde7defd58a3cfb28a70a70bb46cca70d819d21a3145f0a04c9c65f1312eaa0df7b7839cf", 0x73}], 0x5, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r33, r34, r71}}}, @cred={{0x1c, 0x1, 0x2, {r74, r75, r76}}}, @cred={{0x1c, 0x1, 0x2, {r77, r79, r80}}}, @cred={{0x1c, 0x1, 0x2, {r64, r126, r15}}}, @cred={{0x1c, 0x1, 0x2, {r84, r85, r62}}}, @cred={{0x1c, 0x1, 0x2, {r93, r94, r99}}}, @cred={{0x1c, 0x1, 0x2, {r103, 0xee01, r105}}}, @rights={{0x14, 0x1, 0x1, [r106]}}, @cred={{0x1c, 0x1, 0x2, {r109, r112, r113}}}], 0x118, 0x20}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001b40)="3bc6081f8bb67eac57d633c6085cfa", 0xf}, {&(0x7f0000001b80)="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", 0x1000}], 0x2, 0x0, 0x0, 0x18803}], 0x5, 0x8041) [ 340.317673][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.324828][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.380575][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.450352][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.458329][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.517013][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.560867][ T7967] team0: Port device team_slave_0 added [ 340.576506][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.601083][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.667153][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.713178][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.757973][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.810295][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.818889][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.872264][ T7928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.898311][ T7928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.944885][ T7967] team0: Port device team_slave_1 added [ 340.965644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.990289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.057165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.120394][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.127562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.150411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.176787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.219707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.226823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.275049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.297577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.345745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.380485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.396510][ T7930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.470070][ T7930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.527304][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.610785][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.618823][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.700321][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.750950][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.785863][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.810861][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.819359][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.848683][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 23:50:12 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000001540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0x9e) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}], 0x2, 0x0, &(0x7f0000001600)={0x0, 0x989680}) connect$vsock_stream(r7, &(0x7f0000001780)={0x28, 0x0, 0xffffd8ef, @my=0x1}, 0xa) r8 = accept4$nfc_llcp(r7, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x81000) signalfd4(r8, &(0x7f00000001c0)={0xaa6}, 0x8, 0x80000) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8861b6d8512ef92, @perf_config_ext, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa000000}, r6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, 0xffffffffffffffff) sendmsg$netlink(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="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"], 0x14}, 0x0) recvmmsg(r9, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) [ 341.857336][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.865679][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.873648][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.890665][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.982434][ T7967] device hsr_slave_0 entered promiscuous mode [ 342.066093][ T7967] device hsr_slave_1 entered promiscuous mode [ 342.130830][ T7967] debugfs: Directory 'hsr0' with parent '/' already present! [ 342.141502][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.195819][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.224771][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.294936][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.457103][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.543737][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.613309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.715732][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.783112][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.847218][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.912535][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.919725][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.001435][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.125680][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.165716][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.261606][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.268715][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.398391][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.480832][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.583532][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.690376][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.770435][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.820097][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.833449][ T7961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 23:50:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x18}}], 0x2, 0x0) [ 343.953939][ T7961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.005278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.053004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.166724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.250300][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.258905][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.358362][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.400595][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.420692][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.428894][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.680807][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.840600][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.861374][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.950846][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.011831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.064349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.127944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.135288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 23:50:15 executing program 2: r0 = gettid() unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/ip_tables_names\x00') mkdirat(r1, &(0x7f0000000380)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x202201, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x1) accept4$inet(r3, 0x0, &(0x7f0000000000), 0x81400) socket$inet_tcp(0x2, 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002380)=""/4096, 0x1000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffe1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x24001000, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x11) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000640)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000000), 0x4) 23:50:15 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) set_tid_address(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000400)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x5) mount(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="bb55fcb7da09767076303dd7195f0aa149329e5c266737d3f6f8a538d5915784808d0e4df0b6d7c2c716335477c84fdb13459855f6c0136dff5478e531249bb2c4f8657ab31b63b25a3bb681e249068a29649f37392028cd5aeee7eec277f9890f0144ffccd788d1e228c2b133e73addceb6fe9c8bb77d1cd1108b6a9ec5fd86ba4b9167cda8d0c61d6cadf0b2c55b2c5d9fd446e1cf29435369d658b453e8622056c78559f5bcc0522422f1f0954447ef7354aa5e0d5798bc82c245d184b91fdf92c2e8dd8cee31b05ed0f2e0721a6d2f6375ef88288a234f71164c6a2b09df360600e42d8cc616bda8c69f060003bdb221a2a641"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) pipe(0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000040)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 23:50:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x7, 0x6, 0x3, 0x9}, {0x4ca3, 0x0, 0x7, 0x200}, {0x0, 0x0, 0x4, 0x81}, {0x0, 0x0, 0x0, 0x9}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$sndpcmp(0x0, 0x7fffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) setxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0406050e50ac05"], 0x7, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10004, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x0, 0x80c, 0xffff072b, 0x44d63714, 0x7, "a64d49116318d864b5b486512c6ed0c210aead", 0xfffffff8, 0x3}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 345.302349][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.324862][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.430908][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.472770][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.489203][ T8058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.525712][ T26] audit: type=1804 audit(1573429815.706:32): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/2/file0" dev="sda1" ino=16563 res=1 [ 345.558818][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.597839][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.670417][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.709333][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.768481][ T7967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.843204][ T7967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.939469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.003088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.117725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.209102][ T26] audit: type=1804 audit(1573429816.386:33): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/2/file0" dev="sda1" ino=16563 res=1 [ 346.255846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.360519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 23:50:16 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = getgid() fchownat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, r1, 0x1000) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000200)=0x1) ioctl$KDDISABIO(r2, 0x4b37) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x800) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) r6 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)='4', 0xec) sendfile(r6, r7, 0x0, 0x666b) sendfile(r6, r7, 0x0, 0xa195) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r11 = getgid() fchownat(r2, &(0x7f0000000880)='./file0\x00', r10, r11, 0x1000) r12 = syz_open_dev$usbmon(0x0, 0x45, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r12, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r12, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0xffffffff}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x8006}}, 0x10) ioctl$TIOCSWINSZ(r12, 0x5414, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x4}) ioctl$BLKTRACETEARDOWN(r12, 0x1276, 0x0) fchownat(r12, &(0x7f0000000880)='./file0\x00', r13, 0x0, 0x1000) clone(0x808e87f3522d80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 346.424759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.459498][ T26] audit: type=1804 audit(1573429816.416:34): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/2/file0" dev="sda1" ino=16563 res=1 23:50:16 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000001640)=""/4109, &(0x7f00000001c0)=0x100d) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000001c0), 0x400000000000150, 0x0) r4 = dup2(r3, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) ptrace$setopts(0x4200, r5, 0x401, 0x20) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000002c0)) write(r0, &(0x7f0000000600)='4', 0xec) sendfile(r0, r1, 0x0, 0x666b) sendfile(r0, r1, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ae1000/0x1000)=nil, 0x1000, 0xa) mbind(&(0x7f0000618000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) r7 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)='4', 0xec) sendfile(r7, r8, 0x0, 0x666b) sendfile(r7, r8, 0x0, 0xa195) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200, 0x0) r11 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x1000, 0x0) ioctl$KDGKBTYPE(r11, 0x4b33, 0x0) r12 = socket$kcm(0x10, 0x800000000003, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10000, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b0e000a800f0000005e510befccd7", 0x2e}], 0x1}, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000a2c000/0x3000)=nil) [ 346.530084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.601807][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.681256][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.688822][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.875757][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.017339][ T26] audit: type=1804 audit(1573429817.196:35): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 [ 347.190428][ T26] audit: type=1804 audit(1573429817.266:36): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 [ 347.441513][ T8262] IPVS: ftp: loaded support on port[0] = 21 [ 347.480037][ T26] audit: type=1804 audit(1573429817.266:37): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 [ 347.598515][ T26] audit: type=1804 audit(1573429817.396:38): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 [ 347.664865][ T26] audit: type=1804 audit(1573429817.406:39): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 [ 347.722184][ T26] audit: type=1804 audit(1573429817.906:40): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 23:50:17 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x3fffffff}}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0xec) sendfile(r0, r1, 0x0, 0x666b) sendfile(r0, r1, 0x0, 0xa195) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x341001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000600)=']vmnet1[\'\x00'}, 0x30) pipe2$9p(&(0x7f0000000680), 0x80800) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x140000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000700)=0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r7 = geteuid() r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r10 = getegid() fcntl$getownex(r8, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r14, 0x0, r15) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r10]) write$FUSE_ATTR(r6, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r7, r10, 0x8001, 0xd2f}}}, 0x78) r16 = getpid() sched_setscheduler(r16, 0x5, 0x0) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r21 = geteuid() r22 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r22, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r24 = getegid() fcntl$getownex(r22, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r28, 0x0, r29) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=0x0, @ANYRES32=r24, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r25, @ANYRES32=0x0, @ANYRES32=r26, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r27, @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r24]) write$FUSE_ATTR(r20, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r21, r24, 0x8001, 0xd2f}}}, 0x78) r30 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r30, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r30, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r30, &(0x7f00000001c0), 0x400000000000150, 0x0) r31 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r31, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r31, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r31, &(0x7f00000001c0), 0x400000000000150, 0x0) r32 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r32, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r32, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r32, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001340)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000001440)=0xe8) r35 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r36 = geteuid() r37 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r37, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r39 = getegid() fcntl$getownex(r37, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r43, 0x0, r44) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=0x0, @ANYRES32=r39, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r40, @ANYRES32=0x0, @ANYRES32=r41, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r42, @ANYRES32=r44, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r39]) write$FUSE_ATTR(r35, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r36, r39, 0x8001, 0xd2f}}}, 0x78) r45 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r45, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r47 = getegid() fcntl$getownex(r45, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r51 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, 0x0, r52) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=0x0, @ANYRES32=r47, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r48, @ANYRES32=0x0, @ANYRES32=r49, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r50, @ANYRES32=r52, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r53 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r54 = geteuid() r55 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r55, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r57 = getegid() fcntl$getownex(r55, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r61 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r61, 0x0, r62) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=0x0, @ANYRES32=r57, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r58, @ANYRES32=0x0, @ANYRES32=r59, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r60, @ANYRES32=r62, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r57]) write$FUSE_ATTR(r53, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r54, r57, 0x8001, 0xd2f}}}, 0x78) r63 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r63, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r65 = getegid() fcntl$getownex(r63, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r69 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r69, 0x0, r70) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r64, @ANYRES32=0x0, @ANYRES32=r65, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r66, @ANYRES32=0x0, @ANYRES32=r67, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r68, @ANYRES32=r70, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x6, &(0x7f0000001480)=[r39, r49, r57, 0xee01, 0x0, r70]) r72 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r73 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r72, &(0x7f0000000600)='4', 0xec) sendfile(r72, r73, 0x0, 0x666b) sendfile(r72, r73, 0x0, 0xa195) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r72, 0xc0502100, &(0x7f00000014c0)={0x0, 0x0}) r75 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r75], 0x9d) fstat(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = getpid() sched_setscheduler(r77, 0x5, 0x0) r78 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r78, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r78, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r78, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r78, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) r81 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r81, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r81, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r81, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000016c0)={0x0, 0x80000}) r82 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r83 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r82, &(0x7f0000000600)='4', 0xec) sendfile(r82, r83, 0x0, 0x666b) sendfile(r82, r83, 0x0, 0xa195) openat$cgroup(r82, &(0x7f0000001700)='syz0\x00', 0x200002, 0x0) r84 = fcntl$getown(0xffffffffffffffff, 0x9) r85 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r85], 0x9d) r86 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r86, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r88 = getegid() fcntl$getownex(r86, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r92) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r87, @ANYRES32=0x0, @ANYRES32=r88, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r89, @ANYRES32=0x0, @ANYRES32=r90, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r91, @ANYRES32=r92, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r93 = getpid() r94 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r94], 0x9d) r95 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r95, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r97 = getegid() fcntl$getownex(r95, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r101 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r101, 0x0, r102) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r96, @ANYRES32=0x0, @ANYRES32=r97, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r98, @ANYRES32=0x0, @ANYRES32=r99, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r100, @ANYRES32=r102, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r103 = getpgrp(0x0) r104 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r104, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r104, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r104, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r104, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r106 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/snapshot\x00', 0x80000, 0x0) r107 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r108 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r107, &(0x7f0000000600)='4', 0xec) sendfile(r107, r108, 0x0, 0x666b) sendfile(r107, r108, 0x0, 0xa195) ioctl$TIOCGPGRP(r107, 0x540f, &(0x7f0000001800)=0x0) r110 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r111 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r110, &(0x7f0000000600)='4', 0xec) sendfile(r110, r111, 0x0, 0x666b) sendfile(r110, r111, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r110, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000001940)=0xe8) r113 = getegid() r114 = getpid() sched_setscheduler(r114, 0x5, 0x0) r115 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r116 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r115, &(0x7f0000000600)='4', 0xec) sendfile(r115, r116, 0x0, 0x666b) sendfile(r115, r116, 0x0, 0xa195) getsockopt$inet6_IPV6_XFRM_POLICY(r115, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000002e00)=0xe8) r118 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r118, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r120 = getegid() fcntl$getownex(r118, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r124 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r124, 0x0, r125) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r119, @ANYRES32=0x0, @ANYRES32=r120, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r121, @ANYRES32=0x0, @ANYRES32=r122, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r123, @ANYRES32=r125, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r126 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r126], 0x9d) sendmmsg$unix(r0, &(0x7f0000002bc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="34f203822029f46610249e00fd1b72667cc85610f840cc7cd0292de98097439ceca3bafb07b9909c7294c1f2235997454d0e42573f17150910d88a1fd146e8168db18f5dcf80ccd8ff4f78346f9472b032d8710a9149a1d993a761d476bc546d87ab819b6328bb701ee975155334ded013b706a52ac595de95dd1ff1644fee01684f9ae3ed585afe1906c09e88d4e59c2bf5d005806e0779623a858e62bd562fb2b11501388308fe85104a1d5afddbdf12dbb65ebeb0153c2cf42c", 0xbb}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="9e10f51923022fb69e0d3b18aa98e2b60d172cc754fc862ec89cfe6a9003d9d08da439ce68c77126e6fba4245cf0c8eb24014932dc0ea150e1eb8a111e5821f0a5d8f6a51f0bfece93792caab8cc8a9095951ab13cb3dfa447d33ffc21be6439f13d0222b4aa140bec2e2a6af6e8f62db13041d791d11f44fca28dc38d2f58290da776", 0x83}, {&(0x7f0000000380)="9d2c24cf37cd0f76c96b75ce35b53566f42678f2632b2bf8e8452165abd3760491e0f84146e635c82abd6f34a3feb84825b4557a5dac90c6811f1d8bab38e189c46f435de0bbd5d5b883e2d75bda26b21d220d", 0x53}, {&(0x7f0000000400)="727775056a37a6394d930457e90c5072bc59a27dd00629ec3552e9527e3b80aa8b3fd7143f2dd329fb3363ffa5105ac5c7d08d1be1c28155ea47067a8ce27d1ea85ee198782422e331834e67ba759bfb723aa6685bafe9aabbfb1db1447b681a5b77", 0x62}, {&(0x7f0000000480)="4300ff7ddf59eb44f4668050390c93662f928d7a26275491bccbcbb00b7ca0b8619e536ea762875cd4fa061146498c18f54db42f8d98a8b757623fa25dbdd2d1b370305e4b29a67a8615867ec1225cab2ed16a15a9773b2d22eaa9348b3f207b6d0e0131058f2210f88aa6c8179ba240281f3b6fe89853d31c9bde2c83d76d15ae4cb908c921b0d427c045c31e77117cec0c7711e0d93ca4b3f1526c07ae2a8e7320fdb3ba597ff684453acff923f7a0ce5f61a96b7c796d3d41", 0xba}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r114, r117, r125}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r10}}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r24}}}, @rights={{0x14, 0x1, 0x1, [r30]}}], 0x78, 0x40000}, {0xfffffffffffffffd, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000980)="debd106ee1222bb9fc641ea1a04ae0b32886c20513be5c8b3143c9994df66845fca231b82f1a789c772f5440daaaae73939de4323f3b65693b27dc73a7fb979bff5db34352aa4866660db0f6549fe29f08d2b1ac4546fc762dd76ebd80ea0479d0e9649c381918025f151aed1f1baca0e7a4ee149641a6e21b245b6045af8a98eec2539e466ea56e", 0x88}, {&(0x7f0000000a40)="7293c4a5dcbd96f705650cbdffb4af2c8cdeb335", 0x14}, {&(0x7f0000000a80)="2835887c2e7f68c9d0c6c0d86b89058ff3d9e565b0222540a744791610751d35b390493b4b6aba1dd7e4741c84e2f4d3e50c3db56564901eaa5faa1a997c29522378761dbb3bf7f7dc", 0x49}, {&(0x7f0000000b00)="3c8633442ba5a200f84e4f7c628b0fa6aa46eaffcd58e41375d55e7382e85160efc3d2ad59b11936fb54519a5172a3ef5967ec", 0x33}, {&(0x7f0000000b40)="99a796d6ddb5cbd68ba4c8a3f4f68e08321272f2b6470d59e74c89706d9cb88b089cc6a04d996f5cd178eb6e344f658728f957b4e787bdd0b281803fc4ad227de4e822e9c8af15dcefeb9214446d4fce3b1578e1ea5df377afc3e4c171b0536aec0e4cd4d5a03020918b3aad7e6d46c1036a6969bb4aa62b2e9890dd50e422f46127f14b14620e20b44f386c75e96eed03c1be011c0f6680896bedf38af0a2c1c6185d475fb535f52f6d69e1764de31e21a276fe287396a16c067e0ad9d7fe3addf2ba3f0fc4320059795b31b7e9c5442943aa608ab3a57abd6ffbaba9533e04fcff8c10144ea9e130a734dc2701659251739fa6", 0xf4}, {&(0x7f0000000c40)="32b801784fbdaff81821331ee4865936a4d69d02983bbe8b0e0ca4bdce67fedb96bb2fe2f82b1cb5eff8fd3626a268f3aa77b96e569b432850b51ca35210b14119f93b00ca2c44bd46a954b3531806295d1a9234a8c586b2353c4174532c914962d257318eb676267fe9b4b2f0103e9ece215e37775f55e292a5527887fcb114d81c2826390b31b1986c4cd0cf776b41fbcb113799af0290683a5e9d1f22831f8e0bb8c80855d986a7071cc31d1637fd859b360bd597790539036dfb786bbb167aa5ba0657a4caec2a8cc7117d6a3ce529", 0xd1}, {&(0x7f0000000d40)="3ba0d1dd63469bf16eef3c5011b48f57d27adf1e4dc058c2132a5a7a655229f8013b9c2c246aac22b151bb9322f7411c5112da92afce9dde5ac3cb66464f3ce36c23a3bb36cd8697ae0230b8e0be6f1a2bea5e37012bc7dfb5c6443fdcc9f7b6163c57c158f0f14c86a204f4025021ff5855689b0c632bf202c69399927ae8ffd37885f6d77da5a905ee6a78cc4c74fa2170a27a4bddd2185108f868d5079bfb2584457f59925ba669371d98851aaacea51318e1eb2f6bf2c5216c0de55007975b8870b9d992c300b857343bf37c4b51fb46d17f75515c4765cf385f0e799dcd0d76", 0xe2}], 0x7, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r31, r32]}}], 0x18, 0x4008410}, {&(0x7f0000000f00)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000f80)="6f9566eb90acd9423679537d12a78cbbc132c94fed8feacf9ee83fd9ad91dc32b45c1610ad1278f5cd81a015deceff05d386f0f680eda34d1ff136e8af7fdfc3bba68fb2f42752cd80218e826bc13caede324dbf1cd25d1a9f66d1da4f22d0fe7d98928a79499e4f68d82a84675dec2a8a7e311a2eca", 0x76}, {&(0x7f0000001000)="6446c15495e4dcafa1f82275502f6711af911cb30b542b4290aa058b024dd6ec2ab96c98c5b9a5fc9e46eda7f704948f1f6a66e67a4594a5317514e4b9704b0770f20caab7f9897092fd0352cf1c194145677a2aa47a5b1baef5e31885c4c2f407ed2a46af984396da98aedcf33c582e7bda9d0ef66c2781eea0c1e936d2a6846e4a2d0158401cbea9891233a94a", 0x8e}, {&(0x7f00000010c0)="3fcf2ea987a05e97724d5ce12ab718cd6ad886edb7cb93b93838524b3f363be792b51a09be0070e4a8a6aab61edc1d8f6d63e37a3d429b550bbbac38c437df32f6d01178a1198dd7e325b613", 0x4c}, {&(0x7f0000001140)="58d165efc9fa63528ca7765d5019717067552d9dd54ffcfc00c18494478323ef657306979effc4106dbd0462a96d4b552dc9de253dc0a3dbb50f0354e83ba967db5cc5a17b0ab7dde31cea674b250137bb32eeed7d9673082caf02db080a6076e5ffae6dc8ea543b710b2708cf8ed3a71657ed1e2d41e46f1cd870809b67e3e20479", 0x82}, {&(0x7f0000001200)="7787e1eac1559e0997f33631f7a3a56a56c544c76952c1870af867d6ec7ac87eb864df43360b4d9fe96f30f9d669751aff08dd549c5187705ad5f4e31acc4eaeb42df6e755b8b9bfab8ed7176bac9bde7defd58a3cfb28a70a70bb46cca70d819d21a3145f0a04c9c65f1312eaa0df7b7839cf", 0x73}], 0x5, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r33, r34, r71}}}, @cred={{0x1c, 0x1, 0x2, {r74, r75, r76}}}, @cred={{0x1c, 0x1, 0x2, {r77, r79, r80}}}, @cred={{0x1c, 0x1, 0x2, {r64, r126, r15}}}, @cred={{0x1c, 0x1, 0x2, {r84, r85, r62}}}, @cred={{0x1c, 0x1, 0x2, {r93, r94, r99}}}, @cred={{0x1c, 0x1, 0x2, {r103, 0xee01, r105}}}, @rights={{0x14, 0x1, 0x1, [r106]}}, @cred={{0x1c, 0x1, 0x2, {r109, r112, r113}}}], 0x118, 0x20}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001b40)="3bc6081f8bb67eac57d633c6085cfa", 0xf}, {&(0x7f0000001b80)="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", 0x1000}], 0x2, 0x0, 0x0, 0x18803}], 0x5, 0x8041) 23:50:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd97e1cc0634d6b8a, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200)={0xa303732c}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x40800) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x3, 0x5, 0xffffff01, 0x2, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1305, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000033de190100000000000000020000000c7c6671c154173002000000"], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbffffffffffffff00800000000000000e00000000000000010000000000000003000000000000000010000000000000ff7f0000000000000000000000000000000000000000000000000000000000000000000000000000116f8d4eacc5d054c90d9732c15d748215e1603175ab31c67a68ab504c6a8a79dc9f81982b6f1fe03cd46e15dce225e4f27fd279d430e5d11acf0e93e4094cdbe36fd68043176ffca3323a9833bd5b3bb151f9fe02650e3d03390222939f9c51a499d5a57e138629b5bbd29ed69b5f7f83e1f29648ab369fba873f77c7f9a8f8da268d70ac8b81675aa50280312d1d5cff32a1523ad1"]) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x80000001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0) prctl$PR_GET_TSC(0x19, 0x0) 23:50:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003880)={r1, 0x0, 0x9c, 0x0, &(0x7f0000000180)="88f14dfec3c7646dd28af06ef46b423047cb7e4730d5d211cdd85376a9973aed7e3d932c29d8423abd15037964053d72f08516bd0d32dd1896f019d234cc80d19941172afa5cbb5cfdbc8b409065d8d73686dc0767356ca22330edbd986a6d9fda848d382370cb4ec0118ea1d94a7d67a62896b2abaa2c43d16ddd86ff132512a88d364b0479c2352e6272c0c2fdb1a86bd44b1624fc9cd1f0a98ae9", 0x0, 0x7}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000003740)={0x84, @multicast1, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f0000000040)=0xfffffffffffffbc7, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001080), &(0x7f0000001280)=0x14) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000e80), &(0x7f0000000680)=0x68) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x2, 'lc\x00'}, 0x2c) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x1, 0x5, 0x200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x48000000000000}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000012c0)={r5, 0x52}, &(0x7f0000001300)=0x8) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000280)=""/109, &(0x7f0000001340)=0x6d) r6 = socket(0x9, 0xa, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000f00)={0x40000000, 0x1, 0x8, 0x9}, &(0x7f0000000f40)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYBLOB="0300f20b2b247d41e60000835eae8059d7db5387eaeb224b40b158bf4b78607e0101000000000000cb4f2bd851c015102dc0e0ea51af41108280f2519c504a4b27ce18c0ab9a50ab87bfd2d348e0e1f5a7707cb3005728d5160e053ffc50e2bae3132b7785e30fdc85df03b10f716d0d69b99c423595c55d6373b157d9f97ad999e4d505a7a5e04fcfc02cff373eb151e3c6bae1a33754db0427fc358cb1776cea5707041f50c417d85421c565d66ed0509d5c98a20100920604109d247ca76cd3fa4e887771"], 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) r7 = syz_open_dev$dmmidi(&(0x7f00000014c0)='/dev/dmmidi#\x00', 0x46, 0x280) openat$cgroup_ro(r7, &(0x7f0000001480)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x20) syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) 23:50:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x3fffffff}}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0xec) sendfile(r0, r1, 0x0, 0x666b) sendfile(r0, r1, 0x0, 0xa195) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x341001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000600)=']vmnet1[\'\x00'}, 0x30) pipe2$9p(&(0x7f0000000680), 0x80800) syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x5, 0x140000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000700)=0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r7 = geteuid() r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r10 = getegid() fcntl$getownex(r8, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r14, 0x0, r15) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r10]) write$FUSE_ATTR(r6, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r7, r10, 0x8001, 0xd2f}}}, 0x78) r16 = getpid() sched_setscheduler(r16, 0x5, 0x0) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r21 = geteuid() r22 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r22, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r24 = getegid() fcntl$getownex(r22, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r28, 0x0, r29) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=0x0, @ANYRES32=r24, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r25, @ANYRES32=0x0, @ANYRES32=r26, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r27, @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r24]) write$FUSE_ATTR(r20, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r21, r24, 0x8001, 0xd2f}}}, 0x78) r30 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r30, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r30, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r30, &(0x7f00000001c0), 0x400000000000150, 0x0) r31 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r31, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r31, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r31, &(0x7f00000001c0), 0x400000000000150, 0x0) r32 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r32, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r32, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r32, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001340)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000001440)=0xe8) r35 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r36 = geteuid() r37 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r37, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r39 = getegid() fcntl$getownex(r37, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r43, 0x0, r44) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r38, @ANYRES32=0x0, @ANYRES32=r39, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r40, @ANYRES32=0x0, @ANYRES32=r41, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r42, @ANYRES32=r44, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r39]) write$FUSE_ATTR(r35, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r36, r39, 0x8001, 0xd2f}}}, 0x78) r45 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r45, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r47 = getegid() fcntl$getownex(r45, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r51 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r51, 0x0, r52) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=0x0, @ANYRES32=r47, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r48, @ANYRES32=0x0, @ANYRES32=r49, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r50, @ANYRES32=r52, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r53 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r54 = geteuid() r55 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r55, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r57 = getegid() fcntl$getownex(r55, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r61 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r61, 0x0, r62) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=0x0, @ANYRES32=r57, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r58, @ANYRES32=0x0, @ANYRES32=r59, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r60, @ANYRES32=r62, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r57]) write$FUSE_ATTR(r53, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r54, r57, 0x8001, 0xd2f}}}, 0x78) r63 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r63, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r65 = getegid() fcntl$getownex(r63, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r69 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r69, 0x0, r70) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r64, @ANYRES32=0x0, @ANYRES32=r65, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r66, @ANYRES32=0x0, @ANYRES32=r67, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r68, @ANYRES32=r70, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x6, &(0x7f0000001480)=[r39, r49, r57, 0xee01, 0x0, r70]) r72 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r73 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r72, &(0x7f0000000600)='4', 0xec) sendfile(r72, r73, 0x0, 0x666b) sendfile(r72, r73, 0x0, 0xa195) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r72, 0xc0502100, &(0x7f00000014c0)={0x0, 0x0}) r75 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r75], 0x9d) fstat(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = getpid() sched_setscheduler(r77, 0x5, 0x0) r78 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r78, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r78, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r78, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r78, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) r81 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r81, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r81, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r81, &(0x7f00000001c0), 0x400000000000150, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000016c0)={0x0, 0x80000}) r82 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r83 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r82, &(0x7f0000000600)='4', 0xec) sendfile(r82, r83, 0x0, 0x666b) sendfile(r82, r83, 0x0, 0xa195) openat$cgroup(r82, &(0x7f0000001700)='syz0\x00', 0x200002, 0x0) r84 = fcntl$getown(0xffffffffffffffff, 0x9) r85 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r85], 0x9d) r86 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r86, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r88 = getegid() fcntl$getownex(r86, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r92) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r87, @ANYRES32=0x0, @ANYRES32=r88, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r89, @ANYRES32=0x0, @ANYRES32=r90, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r91, @ANYRES32=r92, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r93 = getpid() r94 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r94], 0x9d) r95 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r95, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r97 = getegid() fcntl$getownex(r95, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r101 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r101, 0x0, r102) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r96, @ANYRES32=0x0, @ANYRES32=r97, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r98, @ANYRES32=0x0, @ANYRES32=r99, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r100, @ANYRES32=r102, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r103 = getpgrp(0x0) r104 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r104, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r104, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r104, &(0x7f00000001c0), 0x400000000000150, 0x0) fstat(r104, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r106 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/snapshot\x00', 0x80000, 0x0) r107 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r108 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r107, &(0x7f0000000600)='4', 0xec) sendfile(r107, r108, 0x0, 0x666b) sendfile(r107, r108, 0x0, 0xa195) ioctl$TIOCGPGRP(r107, 0x540f, &(0x7f0000001800)=0x0) r110 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r111 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r110, &(0x7f0000000600)='4', 0xec) sendfile(r110, r111, 0x0, 0x666b) sendfile(r110, r111, 0x0, 0xa195) getsockopt$inet_IP_IPSEC_POLICY(r110, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000001940)=0xe8) r113 = getegid() r114 = getpid() sched_setscheduler(r114, 0x5, 0x0) r115 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r116 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r115, &(0x7f0000000600)='4', 0xec) sendfile(r115, r116, 0x0, 0x666b) sendfile(r115, r116, 0x0, 0xa195) getsockopt$inet6_IPV6_XFRM_POLICY(r115, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000002e00)=0xe8) r118 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r118, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r120 = getegid() fcntl$getownex(r118, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r124 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r124, 0x0, r125) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r119, @ANYRES32=0x0, @ANYRES32=r120, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r121, @ANYRES32=0x0, @ANYRES32=r122, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r123, @ANYRES32=r125, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r126 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9d0000007d0100000083000500ffffff7faa00000000000000000000000000000000ffffff070000007465000000000000ffffffff305b7070703024402c4073656c696e75060000000000000075707a706f7369785f41636c5f6163636573a6757365725c73797374656d242673656375726974796b657972696e67000009006e6f6465766574683105002665746830", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r126], 0x9d) sendmmsg$unix(r0, &(0x7f0000002bc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="34f203822029f46610249e00fd1b72667cc85610f840cc7cd0292de98097439ceca3bafb07b9909c7294c1f2235997454d0e42573f17150910d88a1fd146e8168db18f5dcf80ccd8ff4f78346f9472b032d8710a9149a1d993a761d476bc546d87ab819b6328bb701ee975155334ded013b706a52ac595de95dd1ff1644fee01684f9ae3ed585afe1906c09e88d4e59c2bf5d005806e0779623a858e62bd562fb2b11501388308fe85104a1d5afddbdf12dbb65ebeb0153c2cf42c", 0xbb}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="9e10f51923022fb69e0d3b18aa98e2b60d172cc754fc862ec89cfe6a9003d9d08da439ce68c77126e6fba4245cf0c8eb24014932dc0ea150e1eb8a111e5821f0a5d8f6a51f0bfece93792caab8cc8a9095951ab13cb3dfa447d33ffc21be6439f13d0222b4aa140bec2e2a6af6e8f62db13041d791d11f44fca28dc38d2f58290da776", 0x83}, {&(0x7f0000000380)="9d2c24cf37cd0f76c96b75ce35b53566f42678f2632b2bf8e8452165abd3760491e0f84146e635c82abd6f34a3feb84825b4557a5dac90c6811f1d8bab38e189c46f435de0bbd5d5b883e2d75bda26b21d220d", 0x53}, {&(0x7f0000000400)="727775056a37a6394d930457e90c5072bc59a27dd00629ec3552e9527e3b80aa8b3fd7143f2dd329fb3363ffa5105ac5c7d08d1be1c28155ea47067a8ce27d1ea85ee198782422e331834e67ba759bfb723aa6685bafe9aabbfb1db1447b681a5b77", 0x62}, {&(0x7f0000000480)="4300ff7ddf59eb44f4668050390c93662f928d7a26275491bccbcbb00b7ca0b8619e536ea762875cd4fa061146498c18f54db42f8d98a8b757623fa25dbdd2d1b370305e4b29a67a8615867ec1225cab2ed16a15a9773b2d22eaa9348b3f207b6d0e0131058f2210f88aa6c8179ba240281f3b6fe89853d31c9bde2c83d76d15ae4cb908c921b0d427c045c31e77117cec0c7711e0d93ca4b3f1526c07ae2a8e7320fdb3ba597ff684453acff923f7a0ce5f61a96b7c796d3d41", 0xba}], 0x4, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r114, r117, r125}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r10}}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r24}}}, @rights={{0x14, 0x1, 0x1, [r30]}}], 0x78, 0x40000}, {0xfffffffffffffffd, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000980)="debd106ee1222bb9fc641ea1a04ae0b32886c20513be5c8b3143c9994df66845fca231b82f1a789c772f5440daaaae73939de4323f3b65693b27dc73a7fb979bff5db34352aa4866660db0f6549fe29f08d2b1ac4546fc762dd76ebd80ea0479d0e9649c381918025f151aed1f1baca0e7a4ee149641a6e21b245b6045af8a98eec2539e466ea56e", 0x88}, {&(0x7f0000000a40)="7293c4a5dcbd96f705650cbdffb4af2c8cdeb335", 0x14}, {&(0x7f0000000a80)="2835887c2e7f68c9d0c6c0d86b89058ff3d9e565b0222540a744791610751d35b390493b4b6aba1dd7e4741c84e2f4d3e50c3db56564901eaa5faa1a997c29522378761dbb3bf7f7dc", 0x49}, {&(0x7f0000000b00)="3c8633442ba5a200f84e4f7c628b0fa6aa46eaffcd58e41375d55e7382e85160efc3d2ad59b11936fb54519a5172a3ef5967ec", 0x33}, {&(0x7f0000000b40)="99a796d6ddb5cbd68ba4c8a3f4f68e08321272f2b6470d59e74c89706d9cb88b089cc6a04d996f5cd178eb6e344f658728f957b4e787bdd0b281803fc4ad227de4e822e9c8af15dcefeb9214446d4fce3b1578e1ea5df377afc3e4c171b0536aec0e4cd4d5a03020918b3aad7e6d46c1036a6969bb4aa62b2e9890dd50e422f46127f14b14620e20b44f386c75e96eed03c1be011c0f6680896bedf38af0a2c1c6185d475fb535f52f6d69e1764de31e21a276fe287396a16c067e0ad9d7fe3addf2ba3f0fc4320059795b31b7e9c5442943aa608ab3a57abd6ffbaba9533e04fcff8c10144ea9e130a734dc2701659251739fa6", 0xf4}, {&(0x7f0000000c40)="32b801784fbdaff81821331ee4865936a4d69d02983bbe8b0e0ca4bdce67fedb96bb2fe2f82b1cb5eff8fd3626a268f3aa77b96e569b432850b51ca35210b14119f93b00ca2c44bd46a954b3531806295d1a9234a8c586b2353c4174532c914962d257318eb676267fe9b4b2f0103e9ece215e37775f55e292a5527887fcb114d81c2826390b31b1986c4cd0cf776b41fbcb113799af0290683a5e9d1f22831f8e0bb8c80855d986a7071cc31d1637fd859b360bd597790539036dfb786bbb167aa5ba0657a4caec2a8cc7117d6a3ce529", 0xd1}, {&(0x7f0000000d40)="3ba0d1dd63469bf16eef3c5011b48f57d27adf1e4dc058c2132a5a7a655229f8013b9c2c246aac22b151bb9322f7411c5112da92afce9dde5ac3cb66464f3ce36c23a3bb36cd8697ae0230b8e0be6f1a2bea5e37012bc7dfb5c6443fdcc9f7b6163c57c158f0f14c86a204f4025021ff5855689b0c632bf202c69399927ae8ffd37885f6d77da5a905ee6a78cc4c74fa2170a27a4bddd2185108f868d5079bfb2584457f59925ba669371d98851aaacea51318e1eb2f6bf2c5216c0de55007975b8870b9d992c300b857343bf37c4b51fb46d17f75515c4765cf385f0e799dcd0d76", 0xe2}], 0x7, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r31, r32]}}], 0x18, 0x4008410}, {&(0x7f0000000f00)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000f80)="6f9566eb90acd9423679537d12a78cbbc132c94fed8feacf9ee83fd9ad91dc32b45c1610ad1278f5cd81a015deceff05d386f0f680eda34d1ff136e8af7fdfc3bba68fb2f42752cd80218e826bc13caede324dbf1cd25d1a9f66d1da4f22d0fe7d98928a79499e4f68d82a84675dec2a8a7e311a2eca", 0x76}, {&(0x7f0000001000)="6446c15495e4dcafa1f82275502f6711af911cb30b542b4290aa058b024dd6ec2ab96c98c5b9a5fc9e46eda7f704948f1f6a66e67a4594a5317514e4b9704b0770f20caab7f9897092fd0352cf1c194145677a2aa47a5b1baef5e31885c4c2f407ed2a46af984396da98aedcf33c582e7bda9d0ef66c2781eea0c1e936d2a6846e4a2d0158401cbea9891233a94a", 0x8e}, {&(0x7f00000010c0)="3fcf2ea987a05e97724d5ce12ab718cd6ad886edb7cb93b93838524b3f363be792b51a09be0070e4a8a6aab61edc1d8f6d63e37a3d429b550bbbac38c437df32f6d01178a1198dd7e325b613", 0x4c}, {&(0x7f0000001140)="58d165efc9fa63528ca7765d5019717067552d9dd54ffcfc00c18494478323ef657306979effc4106dbd0462a96d4b552dc9de253dc0a3dbb50f0354e83ba967db5cc5a17b0ab7dde31cea674b250137bb32eeed7d9673082caf02db080a6076e5ffae6dc8ea543b710b2708cf8ed3a71657ed1e2d41e46f1cd870809b67e3e20479", 0x82}, {&(0x7f0000001200)="7787e1eac1559e0997f33631f7a3a56a56c544c76952c1870af867d6ec7ac87eb864df43360b4d9fe96f30f9d669751aff08dd549c5187705ad5f4e31acc4eaeb42df6e755b8b9bfab8ed7176bac9bde7defd58a3cfb28a70a70bb46cca70d819d21a3145f0a04c9c65f1312eaa0df7b7839cf", 0x73}], 0x5, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r33, r34, r71}}}, @cred={{0x1c, 0x1, 0x2, {r74, r75, r76}}}, @cred={{0x1c, 0x1, 0x2, {r77, r79, r80}}}, @cred={{0x1c, 0x1, 0x2, {r64, r126, r15}}}, @cred={{0x1c, 0x1, 0x2, {r84, r85, r62}}}, @cred={{0x1c, 0x1, 0x2, {r93, r94, r99}}}, @cred={{0x1c, 0x1, 0x2, {r103, 0xee01, r105}}}, @rights={{0x14, 0x1, 0x1, [r106]}}, @cred={{0x1c, 0x1, 0x2, {r109, r112, r113}}}], 0x118, 0x20}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001b40)="3bc6081f8bb67eac57d633c6085cfa", 0xf}, {&(0x7f0000001b80)="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", 0x1000}], 0x2, 0x0, 0x0, 0x18803}], 0x5, 0x8041) [ 347.764973][ T26] audit: type=1804 audit(1573429817.936:41): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/3/file0" dev="sda1" ino=16561 res=1 23:50:18 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1a2, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0200002f00050300000008fcfe65ff090000000800030014"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x6, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 23:50:18 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800005000000000000000000000000000000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="214104000000004008001b0000000000"], 0x28}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)) socket$inet(0x10, 0x2000000003, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) chown(&(0x7f0000000380)='./file0\x00', r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_GET_SECUREBITS(0x1b) [ 348.337397][ T8302] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 23:50:18 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0xc6236a69690a1420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080), 0x492492492492751, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400), 0x4) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000480)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r6 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x0, 0x303000) ioctl$EVIOCGABS0(r6, 0x80184540, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fremovexattr(r7, &(0x7f0000000000)=ANY=[]) write$vnet(r7, &(0x7f0000000300)={0x1, {&(0x7f00000004c0)=""/209, 0xd1, &(0x7f00000005c0)=""/162, 0x1, 0x4}}, 0x68) r8 = socket(0x3, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r8, &(0x7f0000000380)="240000001a00110214f9f407000904001100000000020000000200000800040003000000", 0x24) fgetxattr(r8, &(0x7f0000000100)=@random={'system.', '/dev/audio#\x00'}, &(0x7f00000001c0)=""/140, 0x8c) getsockname$packet(r4, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000002c0)='\x03\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000005c0), 0xc95676432d1d98ad, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fremovexattr(r9, &(0x7f0000000000)=ANY=[]) accept4$inet6(r9, 0x0, &(0x7f0000000000), 0x40400) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x54002000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)={0x190, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x922f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, [], 0x28}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @remote, 0xc8f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x42, @loopback, 0x6}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd3f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24e6121a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe58}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x2a53031cc32b3f28) r11 = msgget$private(0x0, 0x0) msgsnd(r11, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r11, 0x1, &(0x7f0000f00f88)) msgsnd(r11, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[]], 0x1, 0x0) msgrcv(r11, &(0x7f0000000040)={0x0, ""/152}, 0xa0, 0x0, 0x1000) msgrcv(r11, &(0x7f00000006c0)={0x0, ""/135}, 0x8f, 0xcede0c36cf5cc6e7, 0x775d5e1c6c9f56cd) sendmsg$nl_route_sched(r3, 0x0, 0x0) [ 348.509798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.516124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.700220][ T8310] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 348.836958][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 348.846119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 348.919960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.925845][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:50:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x90002) sendfile(r3, r3, 0x0, 0x8800000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e1d, @empty}, 0xfffffffffffffe14) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r4, 0x0, 0x0, 0x4000800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r5, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000002c00)}}], 0x1, 0x4000000) r6 = fcntl$dupfd(r4, 0x203, r5) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000140)) fanotify_init(0x0, 0x101000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x183200, 0x0) 23:50:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800005000000000000000000000000000000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="214104000000004008001b0000000000"], 0x28}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='security.evm\x00', 0x0, 0x0, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)) socket$inet(0x10, 0x2000000003, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) chown(&(0x7f0000000380)='./file0\x00', r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_GET_SECUREBITS(0x1b) 23:50:19 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000000100)=@framed={{}, [@map={0x18, 0x5, 0x1, 0x0, r0}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [0x12e], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x3) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x400, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@debug={'debug', 0x3d, 0x8000000000000}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x266901, 0x20) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(r2, r3, 0x0, 0xffffffff) getsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000140)=""/175, &(0x7f0000000200)=0xaf) [ 349.420407][ T8336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.548242][ T8341] 9pnet_virtio: no channels available for device 127.0.0.1 [ 349.568195][ T8333] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 23:50:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f01d866b9800000c00f326635000100000f30ded90ff49500300fc7b671070f20d86635080000000f22d8ba6100ec0f001f633ff30f09", 0x37}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x3, {0xa, 0x4e21, 0x0, @loopback, 0x1}, r5}}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 349.746103][ T8327] syz-executor.3 (8327) used greatest stack depth: 10272 bytes left 23:50:20 executing program 4: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0}], 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x0, 0x49, &(0x7f0000000240)="6383b699e9b35d375eb8ef7d921207fc8fa340defc40f8036c9df701ccd35ff1f41a10fcdabaa0f9ea281cbaa82951714be8d001029f1c5ff12b3be2689490b663379317416e2cfb5f"}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaac56, &(0x7f0000000100), 0x5, 0x0) [ 349.957269][ T8351] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 350.286634][ T8354] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 23:50:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x2000000000000011, 0x2, r0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x90002) sendfile(r3, r3, 0x0, 0x8800000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e1d, @empty}, 0xfffffffffffffe14) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r4, 0x0, 0x0, 0x4000800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r5, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000002c00)}}], 0x1, 0x4000000) r6 = fcntl$dupfd(r4, 0x203, r5) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000140)) fanotify_init(0x0, 0x101000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x183200, 0x0) 23:50:21 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x2000c800) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) 23:50:21 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000000000000000000000000000000000000c2a43994c7"], 0x1}}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xf4c8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:50:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r1) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r4) r5 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000140)=[{&(0x7f0000000100)='Pl', 0x2}, {&(0x7f00000001c0)="1812775bec65ab0a9f47b755d365e21ca1ed3c715947a534835cd7bcc8f1d8fa96b02d777a2a2699549fd4e7ec6704bde65bfdf0def350896919312696bfe0101200fb733a0643c69096a51fb7e6f6cd0a5b40fae0c65648bd590ca25bb119e705761605e5c2", 0x66}, {&(0x7f00000002c0)="bec28118b5819680ca57b7376547172d57e6c88bca91cb02ef3ed25008a24584224d644fb3ef573d781c21a327211efd31701980a09740fea37a01abea46c0f4a8e14f069b2c35c0cb07ed", 0x4b}, {&(0x7f0000000340)="c71531c368115c6b542accc9fa34e30d1b5d2567f22e39d104b6f139542625f220335d897d9b76d3c0ee0375cff7e617acd266dcec32427525e90091e30f19361511b5376195bbcdbb19ee7527321ed51dd20beda4", 0x55}], 0x4, r5) r6 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', r5) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r7) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r1, r6, r7, 0x35fbd1d870a5e846) 23:50:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETFILTEREBPF(r1, 0x6628, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="20002cbd7000fedbdf25010000000000000008410000004c00180000000962726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 23:50:21 executing program 0: pipe2$9p(0x0, 0x0) io_submit(0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20b8, 0x23, 0x1, 0x70bd26, 0x0, {0x20000000004, 0xe00000000000000}, [@generic="2ecec3ad823ef175397b9dac7c17a1d397d861250d4d741c8e3353871a85afaf3ef7f15f039d26d07f25a9c6852c55211f219dca22390155d7b9db1957", @nested={0x1020, 0x36, [@generic="ec36050587230e731d", @typed={0x8, 0x4059, @ipv4=@multicast2}, @generic="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", @typed={0x8, 0x70, @u32=0x3}]}, @generic="eaa34733ea501d987fea2f99f3b6a3e05b0de2625bcf993312fe2fb9e8f2411237114df736b712b5c873beef976f10881a376a666bfc532d47d059576b9eaeb6ff9d0e1ac1d19b", @generic, @generic="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"]}, 0x20b8}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) [ 351.321904][ T8380] netlink: 8356 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.361220][ T8381] usb usb7: check_ctrlrecip: process 8381 (syz-executor.4) requesting ep 01 but needs 81 [ 351.396600][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 351.396621][ T26] audit: type=1804 audit(1573429821.576:50): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/5/file0" dev="sda1" ino=16547 res=1 [ 351.439854][ T8381] usb usb7: usbfs: process 8381 (syz-executor.4) did not claim interface 0 before use [ 351.445516][ T26] audit: type=1800 audit(1573429821.596:51): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16595 res=0 [ 351.507968][ T26] audit: type=1804 audit(1573429821.666:52): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/5/memory.events" dev="sda1" ino=16577 res=1 23:50:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x140000}], 0x1, 0x0, 0x0, 0x3}, 0x3400}], 0x2, 0x0) [ 351.560612][ T8384] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 351.567491][ T8382] syz-executor.2 (8382) used greatest stack depth: 10112 bytes left [ 351.578335][ T26] audit: type=1804 audit(1573429821.686:53): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/5/file0" dev="sda1" ino=16547 res=1 [ 351.644596][ T8384] EXT4-fs error (device loop1): ext4_fill_super:4489: inode #2: comm syz-executor.1: iget: root inode unallocated 23:50:21 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca3de6e", 0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20800, 0x0) openat$cgroup_ro(r4, 0x0, 0xb00000000065808, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 351.689538][ T8383] syz-executor.3 (8383) used greatest stack depth: 10072 bytes left [ 351.716854][ T8381] usb usb7: check_ctrlrecip: process 8381 (syz-executor.4) requesting ep 01 but needs 81 23:50:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYPTR64], 0xfe9d) r5 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)='4', 0xec) sendfile(r5, r6, 0x0, 0x666b) sendfile(r5, r6, 0x0, 0xa195) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x339, &(0x7f0000000080)}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0xde, 0x9}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xcf}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0xd8a}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 23:50:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x9, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x200000000000000f, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 351.740294][ T8381] usb usb7: usbfs: process 8381 (syz-executor.4) did not claim interface 0 before use [ 351.744826][ T26] audit: type=1804 audit(1573429821.746:54): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/5/memory.events" dev="sda1" ino=16577 res=1 [ 351.777018][ T8384] EXT4-fs (loop1): get root inode failed [ 351.782981][ T8384] EXT4-fs (loop1): mount failed [ 351.864282][ T8401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.985808][ T26] audit: type=1804 audit(1573429822.166:55): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/6/file0" dev="sda1" ino=16609 res=1 23:50:22 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000000000000000000000000000000000000c2a43994c7"], 0x1}}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xf4c8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 23:50:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) mlock(&(0x7f0000ff0000/0xd000)=nil, 0xd000) r1 = syz_open_pts(r0, 0x4000000000002) r2 = dup3(r1, r0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="be"}], 0x516112fa7fb3210) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000040)) [ 352.319511][ T8429] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 352.359840][ T8429] EXT4-fs error (device loop1): ext4_fill_super:4489: inode #2: comm syz-executor.1: iget: root inode unallocated [ 352.380195][ T8429] EXT4-fs (loop1): get root inode failed [ 352.386343][ T8429] EXT4-fs (loop1): mount failed 23:50:22 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) r4 = syz_open_dev$dspn(0x0, 0x0, 0x20000) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000200), 0x4) ptrace$setsig(0x4203, r6, 0x1b, 0x0) fcntl$dupfd(r5, 0x0, r0) memfd_create(&(0x7f0000000040)='\x00', 0x4) r8 = socket$inet(0x2, 0x0, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r9 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x64b5b5e7, 0x109000) ioctl$VIDIOC_SUBDEV_S_EDID(r9, 0xc0285629, &(0x7f0000000340)={0x0, 0x7, 0x74, [], &(0x7f0000000300)=0x5}) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) write$P9_ROPEN(r8, &(0x7f0000000040)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0xaea, 0x4) [ 352.572214][ T8438] block nbd3: Unsupported socket: shutdown callout must be supported. 23:50:22 executing program 1: mlockall(0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000540)={0x1, r3, 0x1}) r5 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x18, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x8}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd2c, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", ""]}, 0x24}}, 0x80) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="4380d2bd4faa33a01cdb670b5867a27a58d3ff6dc8f75c2717febb020faa755ce21f88e992c8755e6a64b75c4fb68eb2ab7d9caf06fa21ba946205df6cb6f0b11da6e9782769ad1f1fe505d63081b998115f7bc50c6e6d6f6d3bc11bc1bd5ae6757ee00c21fe82acb44419ba25f44438536c47944ac00e9d1636d6d0b640f00519f9bb71aedff464af5a7980e78935b2d4c778d45257b42e2ce282b64172d9f1d3ce527c4349c1c1868d68e3e392dd0771b36bdbb962acd8c013ed56c8efadbcb6e6f123a78aff558bdca3b0d70f7d96ca4518878f231b3a5d2ae23e77614ec85b64", 0xe2, r11}, 0x68) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r12, @ANYBLOB="d57e0000000000001800120008000100767469000c00020008000100f263c0b1407c72f9899cd14d9a6e90b9bbec06785fbe47ab4f83853d2e7319c093bebae7684fec629c4923ce32cbc3afda0b328da4f3295afa574714e0ab4fbafbec6a17af8e1aef11e3498e6ce22af0", @ANYRES32=r12], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x629, 0x0, r12}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) connect$packet(r6, &(0x7f0000001740)={0x11, 0x16, r12, 0x1, 0x4, 0x6, @local}, 0x14) [ 352.613963][ T26] audit: type=1804 audit(1573429822.796:56): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/6/file0" dev="sda1" ino=16609 res=1 23:50:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 23:50:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x140000}], 0x1, 0x0, 0x0, 0x3}, 0x3400}], 0x2, 0x0) [ 352.914738][ T26] audit: type=1804 audit(1573429823.096:57): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/7/file0" dev="sda1" ino=16602 res=1 23:50:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002}, 0x0) r1 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x20001000000003, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r5, 0x2) write(r4, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r6 = socket(0x10, 0x20001000000003, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) write(r6, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) 23:50:23 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca3de6e", 0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20800, 0x0) openat$cgroup_ro(r4, 0x0, 0xb00000000065808, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000001c0), 0x400000000000150, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) write(r1, &(0x7f0000000440)="b9c482fc62453df4ee30324e6b2310", 0xfffffe6f) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 23:50:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x800}, 0x14) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0xfffffc00, {{0x2, 0x4e21, @multicast1}}, 0x0, 0xa, [{{0x2, 0x4e22, @rand_addr=0x3}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @local}}]}, 0x590) 23:50:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08e5cf2996bb12f77af3"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), 0x40, 0x0, &(0x7f0000000240)=""/151, 0x97, &(0x7f0000000300)=""/113}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 353.599149][ T8472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.622871][ T8472] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.691897][ T26] audit: type=1804 audit(1573429823.876:58): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/7/file0" dev="sda1" ino=16602 res=1 [ 353.735717][ T8480] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.759337][ T26] audit: type=1804 audit(1573429823.876:59): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/7/file0" dev="sda1" ino=16602 res=1 [ 353.791420][ T8468] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 23:50:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002}, 0x0) r1 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x20001000000003, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r5, 0x2) write(r4, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r6 = socket(0x10, 0x20001000000003, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) write(r6, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) 23:50:24 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 354.208005][ T8499] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 354.671295][ T8492] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 23:50:25 executing program 4: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, &(0x7f00000005c0)=""/241, 0xf1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1}}], 0x2, 0x162, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)='4', 0xec) sendfile(r5, r6, 0x0, 0x666b) sendfile(r5, r6, 0x0, 0xa195) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r7, 0x0, 0x666b) sendfile(r4, r7, 0x0, 0xa195) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0xffffffff) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @local, 0x7fff}}, 0x24) 23:50:25 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08e5cf2996bb12f77af3"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), 0x40, 0x0, &(0x7f0000000240)=""/151, 0x97, &(0x7f0000000300)=""/113}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:50:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 23:50:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0xff, 0x59e, 0xf9, &(0x7f0000000040)="86a6774dbaf1accd96efc97730af0e8f4ff4b381d99b643d09150a32d7d6e280ae2575d40a6bb9f65b938b1e737db0a8702624c1a4362838e2e490cdf8eccb0ad365605f0f9e89b56432c224e746a5d602df5bcdfe1740a7f2f802bab315bd4f63d0732a2cc808200ff4c09106ef569a32b7a0f0bdc7a51d48561bcaca16b6060e1b0e0583388258950eb7f59afd862ee56edc15bd3b4649c2109f0dc6cd905d5cc49116b4e3cb961a0c62ad267e6a3316ba53085e4b2a9e308758cfc0a691eab9a8b29e5c2f2f871d37971cfbe144ce29babeff1cd2a36a5a175ded7f4cf1c5d7a6c646550d349fe2d32ac671ea329037d91ce32865040bfb"}) setreuid(0x0, r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 23:50:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401000fff0270fff8", 0xfffffffffffffe74}], 0x30d0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x7, 0xff, 0x2, 0x7fff}, {0x6, 0x4, 0x40, 0x5}, {0x40, 0x7f, 0x5, 0x3}, {0x5, 0x40, 0x1, 0x5}, {0x401, 0xc0, 0x8, 0x53f}, {0x1, 0x66, 0x2, 0x200}, {0x6, 0x1, 0x6, 0x3f}, {0x8, 0x0, 0x46, 0x8}, {0x807e, 0x0, 0xc0, 0xfff}, {0x3f, 0x1, 0x8, 0x8001}]}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140), &(0x7f0000000180)) bind$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x400000000000150, 0x0) signalfd(r2, &(0x7f00000000c0)={0x200}, 0x8) 23:50:25 executing program 4: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, &(0x7f00000005c0)=""/241, 0xf1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1}}], 0x2, 0x162, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)='4', 0xec) sendfile(r5, r6, 0x0, 0x666b) sendfile(r5, r6, 0x0, 0xa195) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r7, 0x0, 0x666b) sendfile(r4, r7, 0x0, 0xa195) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0xffffffff) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @local, 0x7fff}}, 0x24) 23:50:26 executing program 1: mlockall(0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000540)={0x1, r3, 0x1}) r5 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x18, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x8}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd2c, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", ""]}, 0x24}}, 0x80) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="4380d2bd4faa33a01cdb670b5867a27a58d3ff6dc8f75c2717febb020faa755ce21f88e992c8755e6a64b75c4fb68eb2ab7d9caf06fa21ba946205df6cb6f0b11da6e9782769ad1f1fe505d63081b998115f7bc50c6e6d6f6d3bc11bc1bd5ae6757ee00c21fe82acb44419ba25f44438536c47944ac00e9d1636d6d0b640f00519f9bb71aedff464af5a7980e78935b2d4c778d45257b42e2ce282b64172d9f1d3ce527c4349c1c1868d68e3e392dd0771b36bdbb962acd8c013ed56c8efadbcb6e6f123a78aff558bdca3b0d70f7d96ca4518878f231b3a5d2ae23e77614ec85b64", 0xe2, r11}, 0x68) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r12, @ANYBLOB="d57e0000000000001800120008000100767469000c00020008000100f263c0b1407c72f9899cd14d9a6e90b9bbec06785fbe47ab4f83853d2e7319c093bebae7684fec629c4923ce32cbc3afda0b328da4f3295afa574714e0ab4fbafbec6a17af8e1aef11e3498e6ce22af0", @ANYRES32=r12], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x629, 0x0, r12}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) connect$packet(r6, &(0x7f0000001740)={0x11, 0x16, r12, 0x1, 0x4, 0x6, @local}, 0x14) 23:50:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000001c0), 0x400000000000150, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x3, "f78f5e7334"}, 0x7, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a80)) fchown(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001, 0xd2f}}}, 0x78) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) [ 356.701079][ T8560] debugfs: Directory '8560-4' with parent 'kvm' already present! [ 356.795168][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 356.795348][ T26] audit: type=1804 audit(1573429826.976:87): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/9/file0" dev="sda1" ino=16550 res=1 23:50:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x800, 0x18030924ae0207dc, 0x3, 0x2}, &(0x7f00000001c0)=0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x7) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 23:50:27 executing program 3: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x641281fe, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0x122) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058020af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697863e6ebd80f75cadcb79366256287fca9", 0x6b, 0xfffffffffffffffd) r1 = syz_open_dev$vbi(0x0, 0x2, 0x2) tee(r1, r0, 0xffffffffffffffff, 0x0) r2 = dup(r0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000200)=0x5574, &(0x7f0000000240)=0x4) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendfile(r3, r4, 0x0, 0xa195) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000002c0)="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", 0xfc) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000140)={0x8000, 0x1}) [ 357.137983][ T26] audit: type=1804 audit(1573429827.316:88): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/9/file0" dev="sda1" ino=16550 res=1 [ 357.187189][ T8572] IPVS: ftp: loaded support on port[0] = 21 [ 357.251399][ T8576] PKCS8: Unsupported PKCS#8 version 23:50:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) sendfile(r2, r2, 0x0, 0x8800000) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400001800210000000000003e9115170000001c140000f40000014000000008000900000000005787358eb33c06cd81c5751962a020ac447416730fa824f768d54ae7e6de676d157e66403ee39d0361bfe1aba75d6d1412501119baef1c4428d9"], 0x1}}, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$inet(0x2, 0x6, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x63c7fed5}, 0xffffffffffffff6b) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)='4', 0xec) sendfile(r7, r8, 0x0, 0x666b) sendfile(r7, r8, 0x0, 0xa195) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@local, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000b80)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getegid() lstat(0x0, 0x0) r12 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r12, 0x0, r13) r14 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80401, 0x0) r15 = geteuid() r16 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r16, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r18 = getegid() fcntl$getownex(r16, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r22, 0x0, r23) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=0x0, @ANYRES32=r18, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r19, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r21, @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) getgroups(0x1, &(0x7f00000000c0)=[r18]) write$FUSE_ATTR(r14, &(0x7f0000000140)={0x78, 0xfffffffffffffffe, 0x2, {0x5, 0x1, 0x0, {0x5, 0x3, 0x833, 0xfff, 0x4b9b, 0xffff, 0xae3d, 0x620c, 0x80000000, 0x9, 0x0, r15, r18, 0x8001, 0xd2f}}}, 0x78) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)="57c233c336f91f59c58d910a44298c5a5abbbbb18481bf7ac4071da84ddc3690a6461d461dd7580a7bde911ebe176e73ba375d3c30df92d75fd83aa08d78b1518987ae35c462a7209d13df65006c440e9964d3873f95582eec0156551cffe6f5cbdfdb213bc7fc3267faeb710d6fd1e74a07555c1282497494ff12650130f3fdd826f08d1821fb96e0879305ff63f01f4e8e6d24c7cdcbc3ec1d140653a2e7e2c3e2f70f9cabadfc531a700cad449b6714e97d36ea4cae81e779437665a584dc89991879c1d004287ac169f38e37a7064c737e16846622bf2818d97b71", 0xdd}, {&(0x7f0000000580)="4ccd2ce6a966096e2938016fc1cd74275fa3efd85930b9a794f91f5c5a380dbdd4039010d93b89a0429c48a68fe28db2ffe96f4ccd1253dcdda3c844f4ac4a497156b9e29a6836d010ff04c210425bf82fc917da7396869c075555ad29570fe32fa7af477f6a1c19885c9c6ac61a0d4c456059af67144c5a0505421d395c82637f97b28adca768b826799bbad26ee19ff907c5969cf2923f39092d8efcff55d8da2d53c7da5fce4c0c73aaa6d8a7233aa5f637d8b628119dba2afb6679e7c69308b679f6662bfc3b", 0xc8}, {&(0x7f0000000680)}, {&(0x7f0000000340)="89eef8632fa72433a2f6b631b2", 0xd}, {&(0x7f0000000880)="695b501e90c1cebfc1d4e7fae75e716c997c72fde8fa788794a432683eb1267d7225793d38df2872bf8c3295e9767b1f386ba3081d59232bb17fb04b825f67806a51739571e71309befa4bd7ab5b1c", 0x4f}], 0x5, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r18}}}], 0x20}, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 357.279591][ T26] audit: type=1804 audit(1573429827.356:89): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/9/file0" dev="sda1" ino=16550 res=1 23:50:27 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) geteuid() r2 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000d00)) getuid() getresgid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000001680)) getresuid(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000180)={0x7fff, 0x98d6, 0x6da9, 0x1, 0x81}) fstat(r0, 0x0) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01b2b7e6fa53ffa7210c8d0b5bcaa7f376d26f49fcef2357b4d7be156eafb98ffd", 0x83}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}, {0x0, 0x0, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x44081}, {&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0}], 0x4, 0x20000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000000c0)={0x8, 0x8, 0x7}, 0xc) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x125) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000140)={0x9c, 0x1000, 0x4, 0x39, 0x1f, 0x96}) ftruncate(r5, 0x200004) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d0) [ 357.463916][ T26] audit: type=1804 audit(1573429827.396:90): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir529251658/syzkaller.xN0bZn/10/file0" dev="sda1" ino=16551 res=1 [ 357.684508][ T26] audit: type=1804 audit(1573429827.476:91): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/13/file0" dev="sda1" ino=16536 res=1 [ 357.924850][ T26] audit: type=1804 audit(1573429827.866:92): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir005432370/syzkaller.cATY50/8/file0" dev="sda1" ino=16578 res=1 [ 357.965721][ T8572] IPVS: ftp: loaded support on port[0] = 21 23:50:28 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08e5cf2996bb12f77af3"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), 0x40, 0x0, &(0x7f0000000240)=""/151, 0x97, &(0x7f0000000300)=""/113}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 358.081283][ T8585] PKCS8: Unsupported PKCS#8 version [ 358.179816][ T26] audit: type=1804 audit(1573429828.136:93): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir005432370/syzkaller.cATY50/8/file0" dev="sda1" ino=16578 res=1 23:50:28 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000700)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 23:50:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 358.368437][ T26] audit: type=1804 audit(1573429828.136:94): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir005432370/syzkaller.cATY50/8/file0" dev="sda1" ino=16578 res=1 23:50:28 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="fc", 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) [ 358.506531][ T26] audit: type=1804 audit(1573429828.336:95): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/13/file0" dev="sda1" ino=16536 res=1 23:50:28 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/202}, 0x31d, 0x1, 0x5000) [ 358.564404][ T8614] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 23:50:28 executing program 5: mkdir(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) poll(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1fb) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000)=0xa8) [ 358.614729][ T26] audit: type=1804 audit(1573429828.336:96): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/13/file0" dev="sda1" ino=16536 res=1 23:50:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000000)=0xa8) 23:50:29 executing program 5: mkdir(0x0, 0x0) poll(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1fb) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000)=0xa8) 23:50:29 executing program 4: lsetxattr$system_posix_acl(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6243, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x9}, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x8) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4408, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000200000028001400040002002cfe0000040000000400002896438d3d12421c000400000004000200c2fd0a0008001b0000000000"], 0x50}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000040)=0x1783ac51cee27ff2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 23:50:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 23:50:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:50:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:50:30 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08e5cf2996bb12f77af3"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), 0x40, 0x0, &(0x7f0000000240)=""/151, 0x97, &(0x7f0000000300)=""/113}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:50:30 executing program 1: open$dir(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) msgrcv(0x0, &(0x7f0000000200)={0x0, ""/202}, 0xd2, 0x1, 0x4800) 23:50:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') sendfile(r1, r2, 0x0, 0xe9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 23:50:30 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'}) r0 = socket$inet(0x2, 0x100000000003, 0x2000000002) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcc, &(0x7f0000000000), 0x3c) 23:50:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @const]}, {0x0, [0x0, 0xfdcd4607d6fec0c1]}}, &(0x7f0000001b40)=""/240, 0x50, 0xf0, 0x1}, 0x20) 23:50:30 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d3d2b93c3801040408cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESDEC], 0x0, 0x2e}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:50:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000000)={0x0, 0x0, "f643b376201ed0ef9321573a24c20e1d824729484f3136ed9fd4ae19ba750352"}) 23:50:30 executing program 5: mkdir(0x0, 0x0) poll(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1fb) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000)=0xa8) socket$inet(0x2, 0x0, 0x0) 23:50:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 360.548990][ T8680] ptrace attach of "/root/syz-executor.4"[8678] was attempted by "/root/syz-executor.4"[8680] 23:50:30 executing program 4: 23:50:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000200000028001400040002002cfe0000040000000400002896438d3d12421c000400000004000200c2fd0a0008001b0000000000"], 0x50}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:50:31 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 23:50:31 executing program 0: 23:50:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000005a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000180)="176702cbc15b213c6cbfae3af03916e5cc95b590ecbe99e29c23a8d9d7d0f9e293633f7a825be44a5c03c840caff2fcd71b6ca6b7d096b43ee843ba5b3dc38fc725558dbd56338", 0x47}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0) 23:50:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 23:50:31 executing program 1: 23:50:31 executing program 4: 23:50:31 executing program 1: 23:50:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:32 executing program 3: 23:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:32 executing program 0: 23:50:32 executing program 4: 23:50:32 executing program 1: 23:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:32 executing program 3: 23:50:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:32 executing program 0: 23:50:32 executing program 4: 23:50:32 executing program 3: 23:50:32 executing program 1: 23:50:32 executing program 0: 23:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:32 executing program 4: 23:50:33 executing program 1: 23:50:33 executing program 3: 23:50:33 executing program 0: 23:50:33 executing program 4: 23:50:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:33 executing program 3: 23:50:33 executing program 1: 23:50:33 executing program 0: 23:50:33 executing program 4: 23:50:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:33 executing program 0: 23:50:33 executing program 1: 23:50:33 executing program 3: 23:50:33 executing program 4: 23:50:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:34 executing program 3: 23:50:34 executing program 0: 23:50:34 executing program 1: 23:50:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 23:50:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:50:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[], 0x0) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:50:34 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\x92\xf2\x86a\xd5\xb7p\xa6\t\x18@\x12\x8f\xe2\x06\xca\x82\x03\xd1\x12\xecQ%\xaao\x8c\xc6\xb81\x16\xfd;/\xe8\x12H\x91\xe6c\xba\xb7\xd0\x96\x13m\x8a:s\xaf\xc1\x14\xf8\xb9;:y\x9c\xaf-\xfej\xfck\xa7/') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') sendfile(r0, r1, 0x0, 0xe9) 23:50:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ee0600", 0x18, 0x40000000003a, 0x43ff, @dev, @local, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffff0a000000}}}}}}}, 0x0) 23:50:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:35 executing program 0: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x641281fe, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0x122) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058020af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697863e6ebd80f75cadcb79366256287fca9", 0x6b, 0xfffffffffffffffd) r1 = syz_open_dev$vbi(0x0, 0x2, 0x2) tee(r1, r0, 0xffffffffffffffff, 0x0) r2 = dup(r0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000200)=0x5574, &(0x7f0000000240)=0x4) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendfile(r3, r4, 0x0, 0xa195) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000002c0)="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", 0xfc) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000140)={0x8000, 0x1}) 23:50:35 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:35 executing program 3: socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), 0x100000000000010a, 0x0, 0x2b7}, 0x0) 23:50:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:35 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb04000d00160011000586f9835b3f2f009148790003f85acc7c45", 0x2e}], 0x1}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x2}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000000c0)="abfc2f1d8d0b2bbb6bfc1036339491ae49733f09c8769b80edab42a62b45b8bd754e699d2e0e9bbf96f5dde9116f487bc9113ef2", 0x34, 0x8000}, 0x20000090) 23:50:35 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 365.136965][ T8858] PKCS8: Unsupported PKCS#8 version 23:50:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1a9ab4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee38700"/407], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x7, @dev={[], 0x25}}, 0x22, {0x2, 0x4e20, @empty}, 'caif0\x00'}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r3) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r3) r4 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000005c0)={r4, 0xc1, 0x1000}, &(0x7f0000000640)={'enc=', 'raw', ' hash=', {'rmd256-generic\x00'}}, &(0x7f0000000900)="1863a2d8912d7ae2cb9e7923be124fce33c6d12e9ef666140b8d29b250e3c776d7f8699bd89e0aad0adebfe4896acc09e05b986708fc37d46314dcfca88358e0edcf9ade01def212dec7eee6251cf8d6152ff769c3711bc8c475e0d5fd426530fe3dbd25e4c94c07084e5517312a34b4d0cd56daef8cfa977d5646fe7a6845f0c13d0a35adec5ff5302c79e4cf67abbc00ba6cca020e08d833c5bf1d683605cc83c19ffe43bb2d1b7ea12245045effec8a25a990beec5d40abba0eb7cbc3d07cb9", &(0x7f0000001340)="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") preadv(r1, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="3058bd8c9ce7c11ec2f6be8848811cc73dbadbfe9f88362da523dd65c701dc1dfb90ced3589cfb7f8b970558e223", 0x2e, 0x2}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', r6}) [ 365.179349][ T8856] IPVS: ftp: loaded support on port[0] = 21 23:50:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:35 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(0xffffffffffffffff, 0x0, 0x23b) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xa84ec10c45205987, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/95) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)='4', 0xec) sendfile(r6, r7, 0x0, 0x666b) sendfile(r6, r7, 0x0, 0xa195) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IMCTRLREQ(r13, 0x80044945, &(0x7f0000000280)={0x4002, 0x7fffffff, 0x9, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r14, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00', 0x21, 0xffffffffffffff8f}, 0x2c) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r16, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x243, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r16, 0x0, 0x48f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000012c0)) sendmmsg(r14, &(0x7f0000000d00), 0x1bdd307, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) write$UHID_CREATE(r1, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x9e, 0x1}, 0x120) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001280)) [ 365.347438][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 365.347460][ T26] audit: type=1804 audit(1573429835.526:99): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/22/file0" dev="sda1" ino=16532 res=1 23:50:35 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 365.539728][ T26] audit: type=1804 audit(1573429835.626:100): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 [ 365.701946][ T26] audit: type=1804 audit(1573429835.746:101): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 [ 365.827073][ T26] audit: type=1804 audit(1573429835.746:102): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 23:50:36 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 365.962808][ T8873] FAT-fs (loop4): bogus number of reserved sectors [ 366.004340][ T8873] FAT-fs (loop4): Can't find a valid FAT filesystem [ 366.009900][ T26] audit: type=1804 audit(1573429835.866:103): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 [ 366.051635][ T26] audit: type=1804 audit(1573429835.886:104): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 23:50:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x80000000, 0x80000001, 0x7, 0x5, 0x7, 0x80000001, 0x401}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memop.current\x00\x00\x00\x00\x00\x00\x00\x1a\xbf\xff\xc1TD\xf0\xb6F\xb0D|4\x82p\xcbO\xae\x02}$\xeb\xc9>\xbb\xc5\xcfn\b\xbb\x8d\ro\xd3\x15\xb2,q+XC\xa1\x7fcg\xfb4q5\x1a*\xfe\x95X\xd9\xad\xe9.4 \xba(\xd9\xdcY\xa3Vzy\x04\xeb\xa3 \xe3\xab\xfe\x04\x97FiAt\xf3rp\xf9Y=\xd5\xbc\xfb\x1d\x13\x81F\x16\xad\xa5\v\xbdq\xc6v5O', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'], 0xda00) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1ff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 23:50:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000f97178a7aa7b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800160000000000"], 0x3c}}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='/bdev\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x0, 0x7, &(0x7f0000000040)='bridge\x00', 0xffffffffffffffff}, 0x30) sched_rr_get_interval(r4, &(0x7f0000000100)) 23:50:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 366.261816][ T8894] FAT-fs (loop4): bogus number of reserved sectors [ 366.297867][ T26] audit: type=1804 audit(1573429836.006:105): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 [ 366.343864][ T8894] FAT-fs (loop4): Can't find a valid FAT filesystem 23:50:36 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 366.405376][ T26] audit: type=1804 audit(1573429836.006:106): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 [ 366.583741][ T26] audit: type=1804 audit(1573429836.456:107): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/23/file0" dev="sda1" ino=16532 res=1 23:50:36 executing program 4: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000001c0), 0x400000000000150, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="080102040b030000170000000010000037020000030000000000000000000000009d2035be1d0879767e83c54f8de9ca8e096705a11f2643889f52894f405dd3f6f6a46c85cdc14f3e58b01d5497bbbbdb6b25a637d9bb4709bb91f4c763588fb7d11e6eb60b1bbb815ec2b84d479166a57e5a3243026bf6def6cab4e954e329a0794320e25489fe807dceee83a5df130deea3c766a16a1ac58593d2a45300e4b31034056c4c965845763e4dc07ac5f51060e3484ead677423a6dd5716e5c8bf099f7c6039560c21164853af000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095e40ad3c028543f0cc949256da6d733922970c6002bfe5d9443a9d465317339fafba5fd92632492feaa1de4cc11648a7b91a322a04a6ab22ecc452d7fd8620bb0fb0422d2885956b1da98542fb93c61cd65988feac86728fd054de492dd0e46f05c90ac502fef172ebe0fce12a1668487cd7f9b3619f1ec8141015389a0ce7b56658ea03745ff00f56a76753b48528130519ceffa2ec4671ab46031b8f0a6b402805794b8b1708ee6c7c3a90c94fde1ed4290e5bbae89b5a5"], 0x8cc) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r5, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r5, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r5, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x7, @local, 0x8}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x5, 0x200, 0x0, 0xc73, 0xa5950f13, 0xd38, 0x3, r6}, 0x20) 23:50:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x80000000, 0x80000001, 0x7, 0x5, 0x7, 0x80000001, 0x401}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memop.current\x00\x00\x00\x00\x00\x00\x00\x1a\xbf\xff\xc1TD\xf0\xb6F\xb0D|4\x82p\xcbO\xae\x02}$\xeb\xc9>\xbb\xc5\xcfn\b\xbb\x8d\ro\xd3\x15\xb2,q+XC\xa1\x7fcg\xfb4q5\x1a*\xfe\x95X\xd9\xad\xe9.4 \xba(\xd9\xdcY\xa3Vzy\x04\xeb\xa3 \xe3\xab\xfe\x04\x97FiAt\xf3rp\xf9Y=\xd5\xbc\xfb\x1d\x13\x81F\x16\xad\xa5\v\xbdq\xc6v5O', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'], 0xda00) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1ff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) [ 366.700590][ T26] audit: type=1804 audit(1573429836.826:108): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/29/file0" dev="sda1" ino=16541 res=1 23:50:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:37 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(0xffffffffffffffff, 0x0, 0x23b) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xa84ec10c45205987, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/95) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)='4', 0xec) sendfile(r6, r7, 0x0, 0x666b) sendfile(r6, r7, 0x0, 0xa195) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IMCTRLREQ(r13, 0x80044945, &(0x7f0000000280)={0x4002, 0x7fffffff, 0x9, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r14, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00', 0x21, 0xffffffffffffff8f}, 0x2c) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r16, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x243, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r16, 0x0, 0x48f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000012c0)) sendmmsg(r14, &(0x7f0000000d00), 0x1bdd307, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) write$UHID_CREATE(r1, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x9e, 0x1}, 0x120) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001280)) 23:50:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 23:50:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x5191, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) flock(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab54fe98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4678079d00000000006b5b00000000"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) geteuid() fcntl$getownex(r4, 0x10, 0x0) getresgid(0x0, &(0x7f00000008c0), &(0x7f0000000900)) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000080)={0x0, 0x100000, r10}) fstat(0xffffffffffffffff, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 23:50:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x163, 0x11, 0xef}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x400000000000150, 0x0) fcntl$getflags(r2, 0xb) 23:50:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:38 executing program 0: getpid() r0 = getpid() execve(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) sched_setscheduler(r0, 0xd, &(0x7f0000000380)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) r7 = dup2(r6, r5) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r10, 0x0) perf_event_open(0x0, r9, 0x8, 0xffffffffffffffff, 0x14) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) r13 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r14 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r13, &(0x7f0000000600)='4', 0xec) sendfile(r13, r14, 0x0, 0x1) sendfile(r13, r14, 0x0, 0xa195) r15 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r16 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r15, &(0x7f0000000600)='4', 0xec) sendfile(r15, r16, 0x0, 0x666b) sendfile(r15, r16, 0x0, 0xa195) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) r19 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r20 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r19, &(0x7f0000000600)='4', 0xec) sendfile(r19, r20, 0x0, 0x666b) sendfile(r19, r20, 0x0, 0xa195) r21 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r22 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r21, &(0x7f0000000600)='4', 0xec) sendfile(r21, r22, 0x0, 0x666b) sendfile(r21, r22, 0x0, 0xa195) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000100)={0xfff, 0xb99, r9, 0x0, r23, 0x0, 0x3, 0x8}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) userfaultfd(0x65eddfe6250a2fa4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 23:50:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x5191, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) flock(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab54fe98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4678079d00000000006b5b00000000"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) geteuid() fcntl$getownex(r4, 0x10, 0x0) getresgid(0x0, &(0x7f00000008c0), &(0x7f0000000900)) lstat(0x0, &(0x7f0000000c00)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000080)={0x0, 0x100000, r10}) fstat(0xffffffffffffffff, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 23:50:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:38 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(0xffffffffffffffff, 0x0, 0x23b) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xa84ec10c45205987, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/95) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)='4', 0xec) sendfile(r6, r7, 0x0, 0x666b) sendfile(r6, r7, 0x0, 0xa195) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IMCTRLREQ(r13, 0x80044945, &(0x7f0000000280)={0x4002, 0x7fffffff, 0x9, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r14, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00', 0x21, 0xffffffffffffff8f}, 0x2c) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r16, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x243, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r16, 0x0, 0x48f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000012c0)) sendmmsg(r14, &(0x7f0000000d00), 0x1bdd307, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) write$UHID_CREATE(r1, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x9e, 0x1}, 0x120) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001280)) 23:50:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) openat(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getpgid(0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xfffffffffffffe40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, r1, 0xa, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) close(r0) 23:50:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:39 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0xe26e, 0x0, 0x1}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@multicast2, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f0000000300)=ANY=[], 0x6) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000000, 0x301000) r5 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000000fffc) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000001a80)=0x12d) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900)) getgid() ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, 0x0) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0xaf01, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r9, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r9, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r9, r10) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000440)=0x1c, 0x80000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x3}, 0x8) r12 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000040)={'bond0\x00\x02H\xfeL `\x00\nz\x03', 0xffb}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x511000, 0x0) r13 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) getegid() syz_open_dev$vcsa(&(0x7f0000001ac0)='/dev/vcsa#\x00', 0x400, 0x40000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r6, 0x0) socket$packet(0x11, 0x3, 0x300) 23:50:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:39 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(0xffffffffffffffff, 0x0, 0x23b) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xa84ec10c45205987, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/95) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)='4', 0xec) sendfile(r6, r7, 0x0, 0x666b) sendfile(r6, r7, 0x0, 0xa195) r8 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r8, &(0x7f0000000600)='4', 0xec) sendfile(r8, r9, 0x0, 0x666b) sendfile(r8, r9, 0x0, 0xa195) r10 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000000600)='4', 0xec) sendfile(r10, r11, 0x0, 0x666b) sendfile(r10, r11, 0x0, 0xa195) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r3) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$IMCTRLREQ(r13, 0x80044945, &(0x7f0000000280)={0x4002, 0x7fffffff, 0x9, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r14, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00', 0x21, 0xffffffffffffff8f}, 0x2c) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r16, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x243, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r16, 0x0, 0x48f, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000012c0)) sendmmsg(r14, &(0x7f0000000d00), 0x1bdd307, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) write$UHID_CREATE(r1, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x9e, 0x1}, 0x120) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001280)) [ 369.690836][ T9021] device bond0 entered promiscuous mode [ 369.696438][ T9021] device bond_slave_0 entered promiscuous mode 23:50:40 executing program 0: getpid() r0 = getpid() execve(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) sched_setscheduler(r0, 0xd, &(0x7f0000000380)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) r7 = dup2(r6, r5) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r10, 0x0) perf_event_open(0x0, r9, 0x8, 0xffffffffffffffff, 0x14) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) r13 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r14 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r13, &(0x7f0000000600)='4', 0xec) sendfile(r13, r14, 0x0, 0x1) sendfile(r13, r14, 0x0, 0xa195) r15 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r16 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r15, &(0x7f0000000600)='4', 0xec) sendfile(r15, r16, 0x0, 0x666b) sendfile(r15, r16, 0x0, 0xa195) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) r19 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r20 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r19, &(0x7f0000000600)='4', 0xec) sendfile(r19, r20, 0x0, 0x666b) sendfile(r19, r20, 0x0, 0xa195) r21 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r22 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r21, &(0x7f0000000600)='4', 0xec) sendfile(r21, r22, 0x0, 0x666b) sendfile(r21, r22, 0x0, 0xa195) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000100)={0xfff, 0xb99, r9, 0x0, r23, 0x0, 0x3, 0x8}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) userfaultfd(0x65eddfe6250a2fa4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 23:50:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 369.836510][ T9021] device bond_slave_1 entered promiscuous mode 23:50:40 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mknod$loop(&(0x7f0000000140)='.\x00', 0x12, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) getpid() gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x0, r3}) timer_create(0x1, &(0x7f0000000100)={0x0, 0x16, 0x0, @thr={&(0x7f0000000500)="c4e6cf63a93ce939fd4e2bdbc36d8662d35054a7f7268717acbf31b94cc646015fd1cf14169667a70c0a70ef5dce5c1d652dde23e89e4cd85bde9d1b0e5aa807d77325177344461887f7a71a088ad56f6c04acefbd5aec27878be838e8fa1fe22641c5b6847a1c8293b0aa92c74265185d49d7e24c7590bc4d8d9165ed6392247a5544571f0ecf9caa23b8b42b304f1ce595d026452e01a23c6f024cb4f04d46d34b117add40fac89f24262b3798a7b55e9c19b0a6550b8b9dd91e286643fc86e26683bd13709d9b851e416bf5f3e5ab1a4789e8f8a04a6b997e3f44", &(0x7f0000000600)="b32fc25a46579bba31b1407dfa0afde39177600f104eadb12898680dcafe598141eccba0a1718ac3752444622c7c43a0d82ab0865cc2785aedd36ea5551837a90c54be712f6cbc15dfabbc3a32dbffda2256d7b7f1746206a4a5b15aba7c2e4beb3666e0088d1b5ebd884b7d1a1cdb37dbb23ee01c049702151a15e384a7352045dfb6162f230e73b1769a5a5973a0dc4e6e479bf1bc111eead561c69e12e205ff12d9d03128c5e2dd198ee67ce056eb2d2b0d6a45b560d9e7932733b8848daf33398bc37cd4908ef84378cc92bd319626261e040d29b7f78f36ed20c9459e6bfdd446"}}, &(0x7f0000044000)) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x23f}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r11, &(0x7f0000000600)='4', 0xec) sendfile(r11, r12, 0x0, 0x666b) sendfile(r11, r12, 0x0, 0xa195) gettid() openat(r4, &(0x7f0000000700)='./file0\x00', 0x2204a0, 0x0) r13 = getpid() sched_setscheduler(r13, 0x5, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003e00510029bd7000ffdbdf25ff010000"], 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001a00000120407000f00143411eb0e931fd03fe06003100000509ba89b2ed59daa19755372d32f193be9442f6683d96c9332e4bac5e3558532586b79d09a2e208a037bca832cdf12d9a6d0fcbc0845849dfa94e1281a6b298ceb47a5595b3d4167c4ee0a471e726767b8e8a39e500fbf0d9abba7e3e00b8235cf096e7892414bfc639a501ee0ca7839514a4ab2c38dbbf6dd53740daf6ea9d06c6b28fb8b70b7257706da554121f191724c0aa4e6878444c052df677a9d6ed6f26e0a0467281932b772854a86db3d10fad5b5417802488b92797503023e3a1b7ff1d"], 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) connect$packet(r4, &(0x7f0000000300)={0x11, 0x15, r10, 0x1, 0xc0, 0x6, @link_local}, 0x14) r14 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r14, 0x800000015) readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/62, 0x3e) [ 369.899945][ T9019] device bond0 left promiscuous mode [ 369.991813][ T9019] device bond_slave_0 left promiscuous mode [ 370.052168][ T9019] device bond_slave_1 left promiscuous mode [ 370.109792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 370.115731][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:50:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 370.429799][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 370.435646][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 370.441533][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 370.441553][ T26] audit: type=1804 audit(1573429840.616:159): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 23:50:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 370.604211][ T26] audit: type=1804 audit(1573429840.616:160): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 370.702210][ T9043] device bond0 entered promiscuous mode [ 370.725105][ T9043] device bond_slave_0 entered promiscuous mode [ 370.760848][ T9043] device bond_slave_1 entered promiscuous mode [ 370.811811][ T26] audit: type=1804 audit(1573429840.766:161): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 370.836370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 370.836403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 370.859656][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.902364][ T26] audit: type=1804 audit(1573429840.776:162): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 370.937479][ T9071] device bond0 left promiscuous mode [ 371.013799][ T9071] device bond_slave_0 left promiscuous mode [ 371.038759][ T9071] device bond_slave_1 left promiscuous mode [ 371.059846][ T26] audit: type=1804 audit(1573429840.876:163): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/29/bus" dev="sda1" ino=16519 res=1 [ 371.179915][ T26] audit: type=1804 audit(1573429840.876:164): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/29/bus" dev="sda1" ino=16519 res=1 [ 371.264671][ T26] audit: type=1804 audit(1573429840.986:165): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 371.294623][ T26] audit: type=1804 audit(1573429840.986:166): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 371.325961][ T26] audit: type=1804 audit(1573429840.986:167): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 23:50:41 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000240)={0xe26e, 0x0, 0x1}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@multicast2, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f0000000300)=ANY=[], 0x6) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r4) syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000000, 0x301000) r5 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x800000000fffc) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000001a80)=0x12d) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f00000018c0)='./bus\x00', &(0x7f0000001900)) getgid() ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, 0x0) r7 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0xaf01, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r9, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r9, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r9, r10) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000440)=0x1c, 0x80000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x3}, 0x8) r12 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000040)={'bond0\x00\x02H\xfeL `\x00\nz\x03', 0xffb}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x511000, 0x0) r13 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) getegid() syz_open_dev$vcsa(&(0x7f0000001ac0)='/dev/vcsa#\x00', 0x400, 0x40000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0xaf01, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r6, 0x0) socket$packet(0x11, 0x3, 0x300) 23:50:41 executing program 3: getpid() r0 = getpid() execve(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) sched_setscheduler(r0, 0xd, &(0x7f0000000380)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) r7 = dup2(r6, r5) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe7a62a5fe183e2e4, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r10, 0x0) perf_event_open(0x0, r9, 0x8, 0xffffffffffffffff, 0x14) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) r13 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r14 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r13, &(0x7f0000000600)='4', 0xec) sendfile(r13, r14, 0x0, 0x1) sendfile(r13, r14, 0x0, 0xa195) r15 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r16 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r15, &(0x7f0000000600)='4', 0xec) sendfile(r15, r16, 0x0, 0x666b) sendfile(r15, r16, 0x0, 0xa195) r17 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r18 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r17, &(0x7f0000000600)='4', 0xec) sendfile(r17, r18, 0x0, 0x666b) sendfile(r17, r18, 0x0, 0xa195) r19 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r20 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r19, &(0x7f0000000600)='4', 0xec) sendfile(r19, r20, 0x0, 0x666b) sendfile(r19, r20, 0x0, 0xa195) r21 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r22 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r21, &(0x7f0000000600)='4', 0xec) sendfile(r21, r22, 0x0, 0x666b) sendfile(r21, r22, 0x0, 0xa195) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f00000001c0)=0x1ff, 0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000100)={0xfff, 0xb99, r9, 0x0, r23, 0x0, 0x3, 0x8}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) userfaultfd(0x65eddfe6250a2fa4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 23:50:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 371.355620][ T26] audit: type=1804 audit(1573429840.986:168): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/27/file0" dev="sda1" ino=16672 res=1 [ 371.911417][ T9094] device bond0 entered promiscuous mode [ 371.965377][ T9094] device bond_slave_0 entered promiscuous mode [ 371.972180][ T9094] device bond_slave_1 entered promiscuous mode [ 371.980946][ T9094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.036351][ T9089] device bond0 left promiscuous mode [ 372.044944][ T9089] device bond_slave_0 left promiscuous mode 23:50:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 372.078940][ T9089] device bond_slave_1 left promiscuous mode [ 372.189782][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 372.195674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 372.509806][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.516067][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:50:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:43 executing program 0: syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x81, 0x0, 0x0, 0xd9}, 0x8000, 0x1}, 0x80) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x60) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0x0, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'}) write$9p(r0, &(0x7f0000000800)="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", 0x600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) 23:50:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002000000", 0x22) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x8000, 0x0, 0x5, 0xffff, 0x1, @stepwise={{0xfffffffe, 0x80000000}, {0x10000}, {0x5, 0xa9}}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 23:50:43 executing program 3: syz_init_net_socket$llc(0x1a, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24cda4cc3496333820a988e39b3699acece86452af2bd4d1b60444f341565b6fe79b74b0784c99b91195d2fb67da46d8ed0d4f8cda3b41945d00348", 0x5a}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) listen(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000440)={{0x4a, 0x3f}, 0x1, 0x100, 0xde, {0x1, 0x7f}, 0x0, 0x2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) recvmsg(r1, &(0x7f0000002780)={&(0x7f0000000540)=@ipx, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f0000000700)}, 0x40000040) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7ff, 0x37, 0x1}) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:50:43 executing program 1: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x81, 0x8040) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80840, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x8, 0x101000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r6, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000001c0), 0x400000000000150, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000440)=0x3) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x4801c2, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') write$P9_RUNLINKAT(r9, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) 23:50:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:43 executing program 3: syz_init_net_socket$llc(0x1a, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="530841549d6f3017276cbdd605b5868ed3df235614cd5ecf6c7ded0566c0784dc7a2372ac9d6c4818e9ea3e1719b3301a55cd9f2ec6c61e8d43b6f7a68bf22cc4c77beab52b2fa77afb37876df743482568ff1e69166f35d6be9578fbe96be43eec9006e2fddfdc75ac8b0c4022f897a5a448c7f4436eb2f5c7eb27ef66b35250a386ce24cda4cc3496333820a988e39b3699acece86452af2bd4d1b60444f341565b6fe79b74b0784c99b91195d2fb67da46d8ed0d4f8cda3b41945d00348", 0x5a}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) llistxattr(0x0, &(0x7f00000001c0)=""/87, 0x57) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) listen(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000440)={{0x4a, 0x3f}, 0x1, 0x100, 0xde, {0x1, 0x7f}, 0x0, 0x2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) recvmsg(r1, &(0x7f0000002780)={&(0x7f0000000540)=@ipx, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f0000000700)}, 0x40000040) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7ff, 0x37, 0x1}) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:50:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 373.892702][ T9115] syz-executor.0 (9115) used greatest stack depth: 9944 bytes left 23:50:44 executing program 1: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)='4', 0xec) sendfile(r1, r2, 0x0, 0x666b) sendfile(r1, r2, 0x0, 0xa195) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x81, 0x8040) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80840, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x8, 0x101000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r6, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000001c0), 0x400000000000150, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000440)=0x3) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x4801c2, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') write$P9_RUNLINKAT(r9, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) 23:50:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002000000", 0x22) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x8000, 0x0, 0x5, 0xffff, 0x1, @stepwise={{0xfffffffe, 0x80000000}, {0x10000}, {0x5, 0xa9}}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 23:50:44 executing program 0: syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x81, 0x0, 0x0, 0xd9}, 0x8000, 0x1}, 0x80) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x60) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0x0, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'}) write$9p(r0, &(0x7f0000000800)="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", 0x600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) 23:50:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002000000", 0x22) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x8000, 0x0, 0x5, 0xffff, 0x1, @stepwise={{0xfffffffe, 0x80000000}, {0x10000}, {0x5, 0xa9}}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 23:50:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002000000", 0x22) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x8000, 0x0, 0x5, 0xffff, 0x1, @stepwise={{0xfffffffe, 0x80000000}, {0x10000}, {0x5, 0xa9}}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) 23:50:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:45 executing program 0: syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x81, 0x0, 0x0, 0xd9}, 0x8000, 0x1}, 0x80) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x60) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0x0, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'}) write$9p(r0, &(0x7f0000000800)="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", 0x600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 375.718751][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 375.718776][ T26] audit: type=1804 audit(1573429845.886:206): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/33/file0" dev="sda1" ino=16690 res=1 [ 375.945158][ T26] audit: type=1800 audit(1573429845.886:205): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16699 res=0 23:50:46 executing program 3: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) exit(0x81) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r6, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac60cded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) write$binfmt_aout(r7, &(0x7f0000000a00)={{0xcc, 0xfc, 0xe1, 0xbd, 0x1e3, 0xdc, 0x174, 0x10001}, "ed048fff60c383ffd0a477466482e444620e358c5aca132a4c5a0295d6e1dbc37ac87b2e1cd99e4262f2f6da32b149d22e22904530668259460bc0c9ba66a00ff210fc0b624e36b3c1b4bb19775a241482821c903d3a9cdd4886cdcf2e85a413b2974cabc9ccaa3a18768515712dfe60976887aaca40b4c75c47fd", [[], [], [], [], [], [], [], []]}, 0x89b) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @empty}, 0x288, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='erspan0\x00', 0x100000000, 0x2, 0x7}) 23:50:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') clone3(&(0x7f0000000200)={0x28000000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), 0x23, 0x0, &(0x7f0000000180)=""/56, 0x38, &(0x7f00000001c0)=""/37}, 0x40) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) r6 = syz_open_procfs(r5, &(0x7f00000002c0)='net/dev_mcast\x00') sendfile(r0, r6, 0x0, 0x80000002) [ 376.095062][ T26] audit: type=1804 audit(1573429845.906:207): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/31/file0" dev="sda1" ino=16699 res=1 [ 376.450620][ T26] audit: type=1804 audit(1573429846.626:208): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/37/file0" dev="sda1" ino=16692 res=1 23:50:46 executing program 3: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) exit(0x81) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r6, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac60cded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) write$binfmt_aout(r7, &(0x7f0000000a00)={{0xcc, 0xfc, 0xe1, 0xbd, 0x1e3, 0xdc, 0x174, 0x10001}, "ed048fff60c383ffd0a477466482e444620e358c5aca132a4c5a0295d6e1dbc37ac87b2e1cd99e4262f2f6da32b149d22e22904530668259460bc0c9ba66a00ff210fc0b624e36b3c1b4bb19775a241482821c903d3a9cdd4886cdcf2e85a413b2974cabc9ccaa3a18768515712dfe60976887aaca40b4c75c47fd", [[], [], [], [], [], [], [], []]}, 0x89b) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @empty}, 0x288, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='erspan0\x00', 0x100000000, 0x2, 0x7}) 23:50:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:47 executing program 0: syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x81, 0x0, 0x0, 0xd9}, 0x8000, 0x1}, 0x80) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x60) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0x0, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'}) write$9p(r0, &(0x7f0000000800)="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", 0x600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00'}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) r4 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 376.884495][ T26] audit: type=1804 audit(1573429847.066:209): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/29/file0" dev="sda1" ino=16701 res=1 23:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002000000", 0x22) r3 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)='4', 0xec) sendfile(r3, r4, 0x0, 0x666b) sendfile(r3, r4, 0x0, 0xa195) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x8000, 0x0, 0x5, 0xffff, 0x1, @stepwise={{0xfffffffe, 0x80000000}, {0x10000}, {0x5, 0xa9}}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) [ 377.069368][ T26] audit: type=1800 audit(1573429847.246:210): pid=9233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16690 res=0 23:50:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, &(0x7f0000000080)=0x400000}) [ 377.629464][ T26] audit: type=1804 audit(1573429847.326:211): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/38/file0" dev="sda1" ino=16691 res=1 23:50:47 executing program 3: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) exit(0x81) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r6, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac60cded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) write$binfmt_aout(r7, &(0x7f0000000a00)={{0xcc, 0xfc, 0xe1, 0xbd, 0x1e3, 0xdc, 0x174, 0x10001}, "ed048fff60c383ffd0a477466482e444620e358c5aca132a4c5a0295d6e1dbc37ac87b2e1cd99e4262f2f6da32b149d22e22904530668259460bc0c9ba66a00ff210fc0b624e36b3c1b4bb19775a241482821c903d3a9cdd4886cdcf2e85a413b2974cabc9ccaa3a18768515712dfe60976887aaca40b4c75c47fd", [[], [], [], [], [], [], [], []]}, 0x89b) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @empty}, 0x288, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='erspan0\x00', 0x100000000, 0x2, 0x7}) 23:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:50:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, &(0x7f0000000080)=0x400000}) [ 377.768850][ T26] audit: type=1804 audit(1573429847.566:212): pid=9233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/32/file0" dev="sda1" ino=16690 res=1 [ 377.945534][ T26] audit: type=1804 audit(1573429847.976:213): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/34/file0" dev="sda1" ino=16705 res=1 23:50:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x3, 0x4, 0x1, 0x0, 0x2, 0x25, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x7ff, 0x0, 0x0, 0xfffffffffffffffa], 0x10000, 0x100800}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)='Z', 0x1}], 0x1) 23:50:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x0}) 23:50:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, &(0x7f0000000080)=0x400000}) 23:50:48 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451263e89b340b34dd1361e3d84534f9033c3f00ffff009196c72c93c261e3bd2c4c060cfb6e59c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2af3d781b26c2be97fd960aa85abfbf6422b32bb53a030000000000000074234c1143ffc56840e442df62c55810"], 0x88) pipe(0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2868d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) socket(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(&(0x7f0000000280), 0x86000) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 378.362229][ T26] audit: type=1804 audit(1573429848.536:214): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/39/file0" dev="sda1" ino=16657 res=1 23:50:48 executing program 3: fcntl$notify(0xffffffffffffffff, 0x402, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x7, 0x200}, {0x0, 0x9, 0x4, 0x81}, {0x0, 0x0, 0x0, 0x9}]}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0xfffffffffffffd7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) setxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=@ng={0x4, 0x0, "050e50ac13"}, 0x7, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) pipe(0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10004, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) 23:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x0}) 23:50:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:49 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x42000) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26, 0xa3}, 0x1b) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) 23:50:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0) dup2(r3, r2) 23:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x0}) 23:50:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, 0x0}) 23:50:49 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x3, 0x4, 0x1, 0x0, 0x2, 0x25, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x7ff, 0x0, 0x0, 0xfffffffffffffffa], 0x10000, 0x100800}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)='Z', 0x1}], 0x1) 23:50:49 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x42000) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26, 0xa3}, 0x1b) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) 23:50:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:51 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451263e89b340b34dd1361e3d84534f9033c3f00ffff009196c72c93c261e3bd2c4c060cfb6e59c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2af3d781b26c2be97fd960aa85abfbf6422b32bb53a030000000000000074234c1143ffc56840e442df62c55810"], 0x88) pipe(0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2868d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) socket(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(&(0x7f0000000280), 0x86000) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:50:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, 0x0}) 23:50:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:51 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x3, 0x4, 0x1, 0x0, 0x2, 0x25, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x7ff, 0x0, 0x0, 0xfffffffffffffffa], 0x10000, 0x100800}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)='Z', 0x1}], 0x1) 23:50:51 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x3, 0x4, 0x1, 0x0, 0x2, 0x25, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x7ff, 0x0, 0x0, 0xfffffffffffffffa], 0x10000, 0x100800}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666b) sendfile(r2, r3, 0x0, 0xa195) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)='Z', 0x1}], 0x1) 23:50:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 381.929656][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 381.929726][ T26] audit: type=1804 audit(1573429852.106:223): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/32/file0" dev="sda1" ino=16729 res=1 [ 381.997811][ T26] audit: type=1804 audit(1573429852.116:224): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/34/file0" dev="sda1" ino=16728 res=1 23:50:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, 0x0}) 23:50:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:52 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451263e89b340b34dd1361e3d84534f9033c3f00ffff009196c72c93c261e3bd2c4c060cfb6e59c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2af3d781b26c2be97fd960aa85abfbf6422b32bb53a030000000000000074234c1143ffc56840e442df62c55810"], 0x88) pipe(0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2868d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) socket(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(&(0x7f0000000280), 0x86000) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 382.024285][ T26] audit: type=1804 audit(1573429852.176:225): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/37/file0" dev="sda1" ino=16730 res=1 23:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xa6, 0x29, 0x1, {0x7, [{{0x8, 0x2, 0x3}, 0x2, 0x5, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0x4, 0x80, 0x7, './file0'}, {{0x80, 0x3}, 0x8, 0x2b, 0x7, './file0'}, {{0x20, 0x3, 0x7}, 0x0, 0x2d, 0x7, './file0'}, {{0x20, 0x4, 0x7}, 0x1, 0x80, 0x7, './file0'}]}}, 0xa6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_read_part_table(0x0, 0x0, 0x0) 23:50:52 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) [ 382.417323][ T26] audit: type=1804 audit(1573429852.596:226): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/35/file0" dev="sda1" ino=16657 res=1 23:50:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 382.511848][ T9367] FAULT_INJECTION: forcing a failure. [ 382.511848][ T9367] name failslab, interval 1, probability 0, space 0, times 1 [ 382.635288][ T9367] CPU: 1 PID: 9367 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 382.643147][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.653295][ T9367] Call Trace: [ 382.656641][ T9367] dump_stack+0xf5/0x159 [ 382.660947][ T9367] should_fail.cold+0xa/0x1a [ 382.665725][ T9367] __should_failslab+0xee/0x130 [ 382.670601][ T9367] should_failslab+0x9/0x14 [ 382.675119][ T9367] __kmalloc+0x53/0x690 [ 382.679325][ T9367] ? terminate_walk+0x1d0/0x250 [ 382.684198][ T9367] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 382.689955][ T9367] tomoyo_realpath_from_path+0x83/0x4c0 [ 382.695791][ T9367] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 382.701281][ T9367] tomoyo_path_number_perm+0x10a/0x3c0 [ 382.706807][ T9367] ? __fget+0xb8/0x1d0 [ 382.710985][ T9367] tomoyo_file_ioctl+0x2c/0x40 [ 382.715764][ T9367] security_file_ioctl+0x6d/0xa0 [ 382.720717][ T9367] ksys_ioctl+0x64/0xe0 [ 382.724941][ T9367] __x64_sys_ioctl+0x4c/0x60 [ 382.729811][ T9367] do_syscall_64+0xcc/0x370 [ 382.734338][ T9367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 382.740237][ T9367] RIP: 0033:0x45a219 [ 382.744230][ T9367] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.763937][ T9367] RSP: 002b:00007f19e5062c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.772361][ T9367] RAX: ffffffffffffffda RBX: 00007f19e5062c90 RCX: 000000000045a219 23:50:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)}) 23:50:53 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451263e89b340b34dd1361e3d84534f9033c3f00ffff009196c72c93c261e3bd2c4c060cfb6e59c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2af3d781b26c2be97fd960aa85abfbf6422b32bb53a030000000000000074234c1143ffc56840e442df62c55810"], 0x88) pipe(0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2868d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) socket(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(&(0x7f0000000280), 0x86000) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 382.780681][ T9367] RDX: 00000000200000c0 RSI: 000000004018aee1 RDI: 0000000000000005 [ 382.788773][ T9367] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 382.796853][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19e50636d4 [ 382.804858][ T9367] R13: 00000000004c3998 R14: 00000000004d7c60 R15: 0000000000000006 [ 382.844629][ T9367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.895933][ T26] audit: type=1804 audit(1573429853.076:227): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/33/file0" dev="sda1" ino=16722 res=1 23:50:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:53 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 383.202287][ T26] audit: type=1804 audit(1573429853.196:228): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/36/file0" dev="sda1" ino=16737 res=1 23:50:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666f) sendfile(r2, r3, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="01800000bde74a8b577e8582adddee406e5bb35c4215d49d15c82e15d504440576e4c5d04368b20913d3990eadd498b7ff6087b6fe7b4249d83ddfa6c1922220e5148e0b00"/78, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r5, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r5, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xf381, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:50:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)}) [ 383.497670][ T26] audit: type=1804 audit(1573429853.316:229): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/33/file0" dev="sda1" ino=16722 res=1 [ 383.498639][ T9407] FAULT_INJECTION: forcing a failure. [ 383.498639][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 383.614424][ T26] audit: type=1804 audit(1573429853.316:230): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/33/file0" dev="sda1" ino=16722 res=1 [ 383.724421][ T9407] CPU: 1 PID: 9407 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 383.732270][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.742446][ T9407] Call Trace: [ 383.746014][ T9407] dump_stack+0xf5/0x159 [ 383.750381][ T9407] should_fail.cold+0xa/0x1a [ 383.754998][ T9407] __should_failslab+0xee/0x130 [ 383.759878][ T9407] should_failslab+0x9/0x14 [ 383.764477][ T9407] __kmalloc+0x53/0x690 [ 383.768654][ T9407] ? memcg_kmem_put_cache+0x91/0xe0 23:50:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 383.773929][ T9407] ? tomoyo_encode2.part.0+0xd9/0x260 [ 383.779328][ T9407] tomoyo_encode2.part.0+0xd9/0x260 [ 383.784617][ T9407] tomoyo_encode+0x34/0x50 [ 383.789224][ T9407] tomoyo_realpath_from_path+0x14a/0x4c0 [ 383.794873][ T9407] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 383.800352][ T9407] tomoyo_path_number_perm+0x10a/0x3c0 [ 383.805863][ T9407] ? __fget+0xb8/0x1d0 [ 383.809965][ T9407] tomoyo_file_ioctl+0x2c/0x40 [ 383.814742][ T9407] security_file_ioctl+0x6d/0xa0 [ 383.819701][ T9407] ksys_ioctl+0x64/0xe0 [ 383.823873][ T9407] __x64_sys_ioctl+0x4c/0x60 [ 383.828545][ T9407] do_syscall_64+0xcc/0x370 [ 383.833085][ T9407] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 383.839334][ T9407] RIP: 0033:0x45a219 [ 383.843309][ T9407] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.848564][ T26] audit: type=1804 audit(1573429853.826:231): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/33/file0" dev="sda1" ino=16722 res=1 [ 383.862935][ T9407] RSP: 002b:00007f19e5062c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.862956][ T9407] RAX: ffffffffffffffda RBX: 00007f19e5062c90 RCX: 000000000045a219 [ 383.862968][ T9407] RDX: 00000000200000c0 RSI: 000000004018aee1 RDI: 0000000000000005 [ 383.862980][ T9407] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:50:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) [ 383.862991][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19e50636d4 [ 383.863025][ T9407] R13: 00000000004c3998 R14: 00000000004d7c60 R15: 0000000000000006 23:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)}) [ 384.025458][ T26] audit: type=1804 audit(1573429853.826:232): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/33/file0" dev="sda1" ino=16722 res=1 [ 384.087938][ T9407] ERROR: Out of memory at tomoyo_realpath_from_path. 23:50:54 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)}) 23:50:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="176a5754ca22779430814480cb9c796e277cfc9934cf2105914cbce18cdc17e4da2388d42bf81bc5f041727a0c4c333143f230a1c6c4c795401c569b4165cf8083f5e27b5ab76f6f8d3d753a6fbb3ea72e11ccccec7228b8effeea45d31c2549aebb14a25aad60868921367cc8a09a8115341ad550da9b146ccdd0f719c8e31bdf9a5e610c1de33d540d8684886d876f25185b2944d0db9c"], 0x200600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x91ffffff, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x8030020000000000) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 23:50:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x2, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:50:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)='4', 0xec) sendfile(r2, r3, 0x0, 0x666f) sendfile(r2, r3, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="01800000bde74a8b577e8582adddee406e5bb35c4215d49d15c82e15d504440576e4c5d04368b20913d3990eadd498b7ff6087b6fe7b4249d83ddfa6c1922220e5148e0b00"/78, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r5, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r5, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xf381, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4000000000000000, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:50:56 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 385.999520][ T9459] FAULT_INJECTION: forcing a failure. [ 385.999520][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 386.058203][ T9459] CPU: 0 PID: 9459 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 386.073210][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.093104][ T9459] Call Trace: [ 386.096430][ T9459] dump_stack+0xf5/0x159 [ 386.100797][ T9459] should_fail.cold+0xa/0x1a [ 386.105471][ T9459] __should_failslab+0xee/0x130 [ 386.111323][ T9459] should_failslab+0x9/0x14 [ 386.116372][ T9459] __kmalloc+0x53/0x690 [ 386.120911][ T9459] ? terminate_walk+0x1d0/0x250 [ 386.125807][ T9459] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 386.131657][ T9459] tomoyo_realpath_from_path+0x83/0x4c0 [ 386.137285][ T9459] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 386.142882][ T9459] tomoyo_path_number_perm+0x10a/0x3c0 [ 386.148416][ T9459] ? __fget+0xb8/0x1d0 [ 386.152834][ T9459] tomoyo_file_ioctl+0x2c/0x40 [ 386.158278][ T9459] security_file_ioctl+0x6d/0xa0 23:50:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 386.163682][ T9459] ksys_ioctl+0x64/0xe0 [ 386.172478][ T9459] __x64_sys_ioctl+0x4c/0x60 [ 386.177110][ T9459] do_syscall_64+0xcc/0x370 [ 386.181813][ T9459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.187802][ T9459] RIP: 0033:0x45a219 [ 386.191826][ T9459] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.212492][ T9459] RSP: 002b:00007fd7488dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.221127][ T9459] RAX: ffffffffffffffda RBX: 00007fd7488dec90 RCX: 000000000045a219 [ 386.230537][ T9459] RDX: 00000000200000c0 RSI: 000000004018aee1 RDI: 0000000000000005 [ 386.238586][ T9459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.246837][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd7488df6d4 [ 386.255104][ T9459] R13: 00000000004c3998 R14: 00000000004d7c60 R15: 0000000000000006 23:50:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x10, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 386.649833][ T9459] ERROR: Out of memory at tomoyo_realpath_from_path. 23:50:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:50:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4c01, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2k\x04\x94$$\xb6\x1c@c\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r7, &(0x7f0000000100)='ed\x00', 0x9) fallocate(r7, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) r8 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r10 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=0x0) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f00000005c0)=0xc) r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r15, 0x3, 0xc000, 0x80000003) r16 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r16, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r16, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={r16}) kcmp(r11, r13, 0x4, r14, r17) timer_settime(r9, 0x0, 0x0, 0x0) timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) [ 387.139641][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 387.139664][ T26] audit: type=1804 audit(1573429857.316:243): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/36/file0" dev="sda1" ino=16744 res=1 23:50:57 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:50:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="176a5754ca22779430814480cb9c796e277cfc9934cf2105914cbce18cdc17e4da2388d42bf81bc5f041727a0c4c333143f230a1c6c4c795401c569b4165cf8083f5e27b5ab76f6f8d3d753a6fbb3ea72e11ccccec7228b8effeea45d31c2549aebb14a25aad60868921367cc8a09a8115341ad550da9b146ccdd0f719c8e31bdf9a5e610c1de33d540d8684886d876f25185b2944d0db9c"], 0x200600) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbb) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x91ffffff, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r4, 0x0, r3, 0x0, 0x1000000000000003, 0x8030020000000000) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffffbd) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r4, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 387.419822][ T26] audit: type=1804 audit(1573429857.596:244): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/36/file0" dev="sda1" ino=16744 res=1 [ 387.762082][ T26] audit: type=1804 audit(1573429857.636:245): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/36/file0" dev="sda1" ino=16744 res=1 23:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5421, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:50:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x2, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 388.183488][ T26] audit: type=1804 audit(1573429858.366:246): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/37/file0" dev="sda1" ino=16744 res=1 23:50:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5423, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 388.420802][ T26] audit: type=1804 audit(1573429858.596:247): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/37/file0" dev="sda1" ino=16744 res=1 23:50:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/224, 0xe0}], 0x1}, 0xfffffffb}, {{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000014c0)=""/57, 0x39}, {&(0x7f0000001500)=""/255, 0xff}, {&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/44, 0x2c}, {&(0x7f0000001800)=""/5, 0x5}], 0x8, &(0x7f00000018c0)=""/104, 0x68}, 0x4}, {{&(0x7f0000001940)=@caif=@dbg, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)=""/63, 0x3f}, {&(0x7f0000001a00)=""/148, 0x94}, {&(0x7f0000001ac0)=""/149, 0x95}, {&(0x7f0000001b80)=""/7, 0x7}, {&(0x7f0000001bc0)=""/189, 0xbd}, {&(0x7f0000001c80)=""/11, 0xb}], 0x6, &(0x7f0000001d40)=""/3, 0x3}, 0xb9f}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/187, 0xbb}], 0x1, &(0x7f0000001f00)=""/90, 0x5a}, 0x8}], 0x4, 0x10040, &(0x7f0000002080)={0x77359400}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002100)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000002200)=0xe8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r8, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r8, &(0x7f00000001c0), 0x400000000000150, 0x0) sendmsg$nl_generic(r3, &(0x7f00000026c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0xe00010}, 0xc, &(0x7f0000002680)={&(0x7f0000002240)={0x40c, 0x10, 0x2, 0x70bd29, 0x25dfdbfc, {0x1c}, [@nested={0x104, 0x4e, [@generic="4b10c354cd1e2c616ae78b85381a0a7d6f895f33db0f4baae254925ecd0aafba5d07ac232ceb68c7280dca520bdd", @typed={0x14, 0x67, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0xc, 0x86, @str='smaps\x00'}, @generic="d14aff7112f5f6d3169b6aa6070c79aa9e682ba87ae794d3976f2fb6cba476eee51a5c8b766a0501c73e6b7b40cbc37c05ad7ea9a535909987f1e5c9ab9411855090ce438fd966d0799ebc7b6d59ac447672211626cc19aeb9f6c78846c6c863673cbf33e1dc8b612b163cdb42dd4a980d0f6bb32a3b54d2d541065c08cb5af069c3a3c9857086b76c50506dc802171f2a87818182be9b4d56a68ffda4c753d366cd2e57012d5acb9b42316992c0f72e0a27"]}, @nested={0x144, 0x42, [@typed={0x4, 0x94}, @typed={0x8, 0x4a, @uid=r6}, @typed={0x4, 0x8}, @generic="652b33011ee43bdf6618e75118519c80e3217c5cea067934d7605476be696201b7afb9cbcac08d969410227ffb552f87eed54a21119998afc4c778a9392558b97f6950390c27891c9c20e4d1b6f7e921a984878a920b2de6bdd3fb6d2dd17792445bd9ddee51be8e9f69b8f31536edf801eb75ead5a29f31bf6693955fc931c0d3e22b0fd56ca8d95fa10bd92cce3a2d73f4a9246e4b9a0accc51534c5993af5461d8f0d5591b0f61f2a6881e4a9a41c9ab95991e301438574ae1045a1c9a9b61d8ad21130bc19c7f6875e5174d8", @typed={0x4, 0x2a}, @typed={0x4, 0x2b}, @generic="b0eae35477c678a1d39a257a1cad3787b7b994d6e6163dbfd968f5529bf9ccdf3233bc683d0dc7bfcc88092fd496aadf27c2aac55b77ead9d2976fcd839d7ebd0c0e01b382ce33b977120f0687542760e6e73531e6847c53"]}, @nested={0x9c, 0x40, [@generic="355653929f114679c4a5af617834138924155d63298850c81f6eb548474a84cc2602b8d49bf0d2c829f4fecfa53d6cb0196e162b62c305faa9dfa86a66b90f7975e30621ee63a516a84e7d828d9dfb144b1ea09083c0e61db19a45d9349e2df0bf70403aea7415ba3962517c3b052d8d6f130b549cb310a5e54c9caefe9212baa65d2f8bd171cd763e453d9d45eb4bea1b9c699d24"]}, @nested={0x30, 0x70, [@typed={0x8, 0x3b, @fd=r7}, @typed={0x8, 0x96, @fd=r8}, @typed={0x14, 0x69, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @typed={0x8, 0x13, @ipv4=@multicast2}]}, @generic="654a7dd57f09a1001a8e6a8a19388cb27234de7818ec9c09fc1c0408118b1178b983a9d76b77c73de520f6c176ae024fa306a04d93eb156101fd6676a453a9ba5d9bc4b4a0541bdacb5c023f41710e5f9be7dab0fee6113f1b0d1ba51dbf4ea7816bfe4b0ed9a9784e3bd0f18c49810cd6500b723608c31e89e5f9855e4070d4420eedb98a3903c340c7cc677013660fbce6eb6b4dc912acb9cbc646e73c573cac0781f6b12698b91d7d595485bd2b663b485eda99facfe8bbce3084e614c6d7cef8555b86b8e86870e9ad2418e3d36dbd0fe730f1cab2703a329e3ed5d1fb760b"]}, 0x40c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r9 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000100)={0x401, {{0x2, 0x4e24, @multicast1}}}, 0x88) syz_mount_image$ext4(&(0x7f0000002700)='ext3\x00', &(0x7f0000002740)='./bus\x00', 0x2, 0x7, &(0x7f0000002b40)=[{&(0x7f0000002780)="84e53c418f11997cb6a70c2eb781b793590ad77d8bd83911747d85052ac81463e8f9913ce67b12033da7b40ef7c329ba87c85aca4b7086bc6b48d5c05d0c6ec83137f5964bd5e332cd9dcb713e202b732000c8b062e3e5e310a2070458e9f3a9a4e44705a4fdfc80fb7486e6ed25d6b8d6f3436cbb9ed168748bf23d0332", 0x7e, 0xd6a}, {&(0x7f0000002800)="5727ff87b362bc5f8f3fb0993c4ae20b621f9eac0e450fd01fd23294faee6e0a43013a2fa8d48730a3e621228a0be92d47e844595a1004d99990edc65bafae311c75297905905a32d2c3b7d2", 0x4c, 0x9}, {&(0x7f0000002880)="7407551b6f0f43e7708797c1d8b88c622b20eea3d43463c7fd98dca9c757a8ec9dde26f67bafbdb94bdc546b42cf9ceda47786fe615364a5328e1e6d211be8af9e5a9b1bd4c0b251f12e61", 0x4b, 0x9}, {&(0x7f0000002900)="ea81cb2e35b2a895308b4ac3e2455399c503dbb9762a6a3c8541e1164c1e2064ef0fd3312b76ffa74d460514cb7e31bcbbf6ab7cc201e23ecd6efe1b9d557a3936610c9540ee4421a8060e0b0cec3f6997fd42309e3129", 0x57, 0x5}, {&(0x7f0000002980)="9544a47f46912aeac06c1c0988a000e25c2377165cb4aa197bf63e89247c717e3a93e9f60db631124da215938bc991a9bc9ba620950a4c5e6f5e5afd7576c9f51aaa66833be25daf77ab54340c718c4a6c88f249e46cd687f89980470cd00e8e075bf3c0683821efa03b4edda91510c80e32a2e555facd1ce57bf2302e85830e27e53d008f757fa5751a0cd952569574bb9ccde1841a3bcd161c3c438505ef566cae42cc0c9f72228c23cda0aa78fef47d40462b456b90daaffa73e9e3f2c499762e60f73ac87515dcb99e0c1c1cff366b392d6d94b96d6c0511", 0xda, 0x7}, {&(0x7f0000002a80)="b2734f50b553408cbb78dee27ba1a280434d9a4a06267dd4bf34ab44b5bf1be4039352840a8a687c9a146ecb90ed3837a2b26db17d", 0x35, 0x401}, {&(0x7f0000002ac0)="72207d4fea375d7c5a7c5fdb229ac78476d72387929af1fd36b64b9e958fff4f7797e1725ff7894eb91a0d30c371006907f94d5d0c99c3a0cc64098fa18c347114fdce4552d9241c6fc3427c8caa2c6fba9c4c6ac3e03a6bb6ea8eaa5920ab4f4071e3bad2883c1bf0a7f0", 0x6b, 0x3}], 0x400, &(0x7f0000002c00)={[], [{@subj_type={'subj_type', 0x3d, 'wlan0ppp0^Gmd5sumvmnet1'}}]}) sendfile(r2, r1, 0x0, 0x7ffff000) 23:50:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x10, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 388.759109][ T26] audit: type=1804 audit(1573429858.636:248): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/37/file0" dev="sda1" ino=16744 res=1 [ 388.909107][ T26] audit: type=1804 audit(1573429859.056:249): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/39/bus" dev="sda1" ino=16756 res=1 [ 389.120536][ T26] audit: type=1804 audit(1573429859.156:250): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/39/file0" dev="sda1" ino=16561 res=1 23:50:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2k\x04\x94$$\xb6\x1c@c\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r7, &(0x7f0000000100)='ed\x00', 0x9) fallocate(r7, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) r8 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r10 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=0x0) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f00000005c0)=0xc) r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r15, 0x3, 0xc000, 0x80000003) r16 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r16, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r16, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={r16}) kcmp(r11, r13, 0x4, r14, r17) timer_settime(r9, 0x0, 0x0, 0x0) timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 23:50:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:50:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5450, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:50:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x125f, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 389.268654][ T9560] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 389.276173][ T9496] Process accounting resumed [ 389.458899][ T26] audit: type=1804 audit(1573429859.636:251): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/38/file0" dev="sda1" ino=16737 res=1 23:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 389.685455][ T26] audit: type=1804 audit(1573429859.866:252): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/39/bus" dev="sda1" ino=16756 res=1 23:50:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5451, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4c00, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/224, 0xe0}], 0x1}, 0xfffffffb}, {{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000014c0)=""/57, 0x39}, {&(0x7f0000001500)=""/255, 0xff}, {&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000017c0)=""/44, 0x2c}, {&(0x7f0000001800)=""/5, 0x5}], 0x8, &(0x7f00000018c0)=""/104, 0x68}, 0x4}, {{&(0x7f0000001940)=@caif=@dbg, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)=""/63, 0x3f}, {&(0x7f0000001a00)=""/148, 0x94}, {&(0x7f0000001ac0)=""/149, 0x95}, {&(0x7f0000001b80)=""/7, 0x7}, {&(0x7f0000001bc0)=""/189, 0xbd}, {&(0x7f0000001c80)=""/11, 0xb}], 0x6, &(0x7f0000001d40)=""/3, 0x3}, 0xb9f}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/187, 0xbb}], 0x1, &(0x7f0000001f00)=""/90, 0x5a}, 0x8}], 0x4, 0x10040, &(0x7f0000002080)={0x77359400}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002100)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000002200)=0xe8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000001c0), 0x400000000000150, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r8, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r8, &(0x7f00000001c0), 0x400000000000150, 0x0) sendmsg$nl_generic(r3, &(0x7f00000026c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0xe00010}, 0xc, &(0x7f0000002680)={&(0x7f0000002240)={0x40c, 0x10, 0x2, 0x70bd29, 0x25dfdbfc, {0x1c}, [@nested={0x104, 0x4e, [@generic="4b10c354cd1e2c616ae78b85381a0a7d6f895f33db0f4baae254925ecd0aafba5d07ac232ceb68c7280dca520bdd", @typed={0x14, 0x67, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0xc, 0x86, @str='smaps\x00'}, @generic="d14aff7112f5f6d3169b6aa6070c79aa9e682ba87ae794d3976f2fb6cba476eee51a5c8b766a0501c73e6b7b40cbc37c05ad7ea9a535909987f1e5c9ab9411855090ce438fd966d0799ebc7b6d59ac447672211626cc19aeb9f6c78846c6c863673cbf33e1dc8b612b163cdb42dd4a980d0f6bb32a3b54d2d541065c08cb5af069c3a3c9857086b76c50506dc802171f2a87818182be9b4d56a68ffda4c753d366cd2e57012d5acb9b42316992c0f72e0a27"]}, @nested={0x144, 0x42, [@typed={0x4, 0x94}, @typed={0x8, 0x4a, @uid=r6}, @typed={0x4, 0x8}, @generic="652b33011ee43bdf6618e75118519c80e3217c5cea067934d7605476be696201b7afb9cbcac08d969410227ffb552f87eed54a21119998afc4c778a9392558b97f6950390c27891c9c20e4d1b6f7e921a984878a920b2de6bdd3fb6d2dd17792445bd9ddee51be8e9f69b8f31536edf801eb75ead5a29f31bf6693955fc931c0d3e22b0fd56ca8d95fa10bd92cce3a2d73f4a9246e4b9a0accc51534c5993af5461d8f0d5591b0f61f2a6881e4a9a41c9ab95991e301438574ae1045a1c9a9b61d8ad21130bc19c7f6875e5174d8", @typed={0x4, 0x2a}, @typed={0x4, 0x2b}, @generic="b0eae35477c678a1d39a257a1cad3787b7b994d6e6163dbfd968f5529bf9ccdf3233bc683d0dc7bfcc88092fd496aadf27c2aac55b77ead9d2976fcd839d7ebd0c0e01b382ce33b977120f0687542760e6e73531e6847c53"]}, @nested={0x9c, 0x40, [@generic="355653929f114679c4a5af617834138924155d63298850c81f6eb548474a84cc2602b8d49bf0d2c829f4fecfa53d6cb0196e162b62c305faa9dfa86a66b90f7975e30621ee63a516a84e7d828d9dfb144b1ea09083c0e61db19a45d9349e2df0bf70403aea7415ba3962517c3b052d8d6f130b549cb310a5e54c9caefe9212baa65d2f8bd171cd763e453d9d45eb4bea1b9c699d24"]}, @nested={0x30, 0x70, [@typed={0x8, 0x3b, @fd=r7}, @typed={0x8, 0x96, @fd=r8}, @typed={0x14, 0x69, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @typed={0x8, 0x13, @ipv4=@multicast2}]}, @generic="654a7dd57f09a1001a8e6a8a19388cb27234de7818ec9c09fc1c0408118b1178b983a9d76b77c73de520f6c176ae024fa306a04d93eb156101fd6676a453a9ba5d9bc4b4a0541bdacb5c023f41710e5f9be7dab0fee6113f1b0d1ba51dbf4ea7816bfe4b0ed9a9784e3bd0f18c49810cd6500b723608c31e89e5f9855e4070d4420eedb98a3903c340c7cc677013660fbce6eb6b4dc912acb9cbc646e73c573cac0781f6b12698b91d7d595485bd2b663b485eda99facfe8bbce3084e614c6d7cef8555b86b8e86870e9ad2418e3d36dbd0fe730f1cab2703a329e3ed5d1fb760b"]}, 0x40c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r9 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000100)={0x401, {{0x2, 0x4e24, @multicast1}}}, 0x88) syz_mount_image$ext4(&(0x7f0000002700)='ext3\x00', &(0x7f0000002740)='./bus\x00', 0x2, 0x7, &(0x7f0000002b40)=[{&(0x7f0000002780)="84e53c418f11997cb6a70c2eb781b793590ad77d8bd83911747d85052ac81463e8f9913ce67b12033da7b40ef7c329ba87c85aca4b7086bc6b48d5c05d0c6ec83137f5964bd5e332cd9dcb713e202b732000c8b062e3e5e310a2070458e9f3a9a4e44705a4fdfc80fb7486e6ed25d6b8d6f3436cbb9ed168748bf23d0332", 0x7e, 0xd6a}, {&(0x7f0000002800)="5727ff87b362bc5f8f3fb0993c4ae20b621f9eac0e450fd01fd23294faee6e0a43013a2fa8d48730a3e621228a0be92d47e844595a1004d99990edc65bafae311c75297905905a32d2c3b7d2", 0x4c, 0x9}, {&(0x7f0000002880)="7407551b6f0f43e7708797c1d8b88c622b20eea3d43463c7fd98dca9c757a8ec9dde26f67bafbdb94bdc546b42cf9ceda47786fe615364a5328e1e6d211be8af9e5a9b1bd4c0b251f12e61", 0x4b, 0x9}, {&(0x7f0000002900)="ea81cb2e35b2a895308b4ac3e2455399c503dbb9762a6a3c8541e1164c1e2064ef0fd3312b76ffa74d460514cb7e31bcbbf6ab7cc201e23ecd6efe1b9d557a3936610c9540ee4421a8060e0b0cec3f6997fd42309e3129", 0x57, 0x5}, {&(0x7f0000002980)="9544a47f46912aeac06c1c0988a000e25c2377165cb4aa197bf63e89247c717e3a93e9f60db631124da215938bc991a9bc9ba620950a4c5e6f5e5afd7576c9f51aaa66833be25daf77ab54340c718c4a6c88f249e46cd687f89980470cd00e8e075bf3c0683821efa03b4edda91510c80e32a2e555facd1ce57bf2302e85830e27e53d008f757fa5751a0cd952569574bb9ccde1841a3bcd161c3c438505ef566cae42cc0c9f72228c23cda0aa78fef47d40462b456b90daaffa73e9e3f2c499762e60f73ac87515dcb99e0c1c1cff366b392d6d94b96d6c0511", 0xda, 0x7}, {&(0x7f0000002a80)="b2734f50b553408cbb78dee27ba1a280434d9a4a06267dd4bf34ab44b5bf1be4039352840a8a687c9a146ecb90ed3837a2b26db17d", 0x35, 0x401}, {&(0x7f0000002ac0)="72207d4fea375d7c5a7c5fdb229ac78476d72387929af1fd36b64b9e958fff4f7797e1725ff7894eb91a0d30c371006907f94d5d0c99c3a0cc64098fa18c347114fdce4552d9241c6fc3427c8caa2c6fba9c4c6ac3e03a6bb6ea8eaa5920ab4f4071e3bad2883c1bf0a7f0", 0x6b, 0x3}], 0x400, &(0x7f0000002c00)={[], [{@subj_type={'subj_type', 0x3d, 'wlan0ppp0^Gmd5sumvmnet1'}}]}) sendfile(r2, r1, 0x0, 0x7ffff000) 23:51:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5452, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2k\x04\x94$$\xb6\x1c@c\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r7, &(0x7f0000000100)='ed\x00', 0x9) fallocate(r7, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) r8 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r10 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=0x0) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f00000005c0)=0xc) r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r15, 0x3, 0xc000, 0x80000003) r16 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r16, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r16, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={r16}) kcmp(r11, r13, 0x4, r14, r17) timer_settime(r9, 0x0, 0x0, 0x0) timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 23:51:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4c01, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5460, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) [ 391.365988][ T9610] Process accounting resumed 23:51:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x6364, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5421, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) [ 392.297842][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 392.297897][ T26] audit: type=1804 audit(1573429862.476:264): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/41/file0" dev="sda1" ino=16549 res=1 23:51:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x8933, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 392.725294][ T26] audit: type=1804 audit(1573429862.606:265): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/41/file0" dev="sda1" ino=16553 res=1 [ 392.957464][ T26] audit: type=1804 audit(1573429862.726:266): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/41/file0" dev="sda1" ino=16549 res=1 [ 393.118549][ T26] audit: type=1804 audit(1573429862.736:267): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/41/file0" dev="sda1" ino=16549 res=1 [ 393.233673][ T26] audit: type=1804 audit(1573429862.846:268): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/41/file0" dev="sda1" ino=16553 res=1 [ 393.270033][ T26] audit: type=1804 audit(1573429862.856:269): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/41/file0" dev="sda1" ino=16553 res=1 23:51:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2k\x04\x94$$\xb6\x1c@c\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(r2, r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r7, &(0x7f0000000100)='ed\x00', 0x9) fallocate(r7, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) r8 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r8}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r10 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)=0x0) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f00000005c0)=0xc) r14 = open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x83b2f476773c9c96) r15 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r15, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r15, 0x3, 0xc000, 0x80000003) r16 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r16, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r16, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x89e2, &(0x7f00000004c0)={r16}) kcmp(r11, r13, 0x4, r14, r17) timer_settime(r9, 0x0, 0x0, 0x0) timer_settime(r9, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 23:51:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) 23:51:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5450, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xae01, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 393.409314][ T9635] Process accounting resumed [ 393.534611][ T26] audit: type=1804 audit(1573429863.716:270): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/42/file0" dev="sda1" ino=16759 res=1 23:51:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xae41, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 393.894843][ T26] audit: type=1804 audit(1573429863.746:271): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/42/file0" dev="sda1" ino=16760 res=1 23:51:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5451, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) [ 394.251917][ T26] audit: type=1804 audit(1573429863.986:272): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/42/file0" dev="sda1" ino=16760 res=1 23:51:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 394.544732][ T26] audit: type=1804 audit(1573429863.996:273): pid=9714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/42/file0" dev="sda1" ino=16759 res=1 23:51:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5452, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40045431, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 395.593906][ T9703] Process accounting resumed 23:51:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5460, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x400454ca, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x6364, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40045564, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x6628, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40047452, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 397.380174][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 397.380195][ T26] audit: type=1804 audit(1573429867.556:297): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/46/file0" dev="sda1" ino=16515 res=1 [ 397.723053][ T26] audit: type=1804 audit(1573429867.816:298): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/46/file0" dev="sda1" ino=16515 res=1 23:51:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x8912, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 397.963130][ T26] audit: type=1804 audit(1573429867.826:299): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/46/file0" dev="sda1" ino=16515 res=1 23:51:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40049409, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 398.236515][ T26] audit: type=1804 audit(1573429868.416:300): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/46/file0" dev="sda1" ino=16734 res=1 23:51:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 398.345816][ T26] audit: type=1804 audit(1573429868.506:301): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/46/file0" dev="sda1" ino=16532 res=1 [ 398.611057][ T26] audit: type=1804 audit(1573429868.746:302): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/46/file0" dev="sda1" ino=16734 res=1 [ 398.711408][ T26] audit: type=1804 audit(1573429868.746:303): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/46/file0" dev="sda1" ino=16532 res=1 23:51:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x8933, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40081271, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 398.831755][ T26] audit: type=1804 audit(1573429868.756:304): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/46/file0" dev="sda1" ino=16532 res=1 23:51:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) [ 398.955918][ T26] audit: type=1804 audit(1573429869.106:305): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/47/file0" dev="sda1" ino=16517 res=1 23:51:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') [ 399.613361][ T26] audit: type=1804 audit(1573429869.346:306): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/47/file0" dev="sda1" ino=16517 res=1 23:51:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xae01, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40086602, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xae41, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4008ae89, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, &(0x7f0000000080)=0x400000}) 23:51:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xae80, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4008ae90, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:51:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x400454ca, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 23:51:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40049409, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) [ 402.488976][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 402.489001][ T26] audit: type=1804 audit(1573429872.666:327): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/49/file0" dev="sda1" ino=16778 res=1 23:51:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) [ 402.883319][ T26] audit: type=1804 audit(1573429872.706:328): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/49/file0" dev="sda1" ino=16778 res=1 23:51:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40086602, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 403.024048][ T26] audit: type=1804 audit(1573429873.176:329): pid=10014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/49/file0" dev="sda1" ino=16779 res=1 23:51:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x0, &(0x7f0000000080)=0x400000}) 23:51:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4020940d, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 403.595947][ T26] audit: type=1804 audit(1573429873.186:330): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/50/file0" dev="sda1" ino=16780 res=1 23:51:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40086607, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 404.032333][ T26] audit: type=1804 audit(1573429873.416:331): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/49/file0" dev="sda1" ino=16779 res=1 23:51:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x0, &(0x7f0000000080)=0x400000}) 23:51:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40086602, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4090ae82, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 404.504040][ T26] audit: type=1804 audit(1573429873.416:332): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/49/file0" dev="sda1" ino=16779 res=1 23:51:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40087703, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x0, 0x0, &(0x7f0000000080)=0x400000}) [ 404.790029][ T26] audit: type=1804 audit(1573429873.426:333): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/50/file0" dev="sda1" ino=16780 res=1 [ 404.959894][ T26] audit: type=1804 audit(1573429873.436:334): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir257137408/syzkaller.DfdZSd/50/file0" dev="sda1" ino=16780 res=1 [ 405.026435][ T26] audit: type=1804 audit(1573429873.806:335): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/50/file0" dev="sda1" ino=16515 res=1 23:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4008ae89, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4138ae84, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 405.062653][ T26] audit: type=1804 audit(1573429874.016:336): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/50/file0" dev="sda1" ino=16515 res=1 23:51:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x0, 0x0}) 23:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4008ae90, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x80045430, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x800454d2, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4020940d, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) 23:51:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x80086301, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r11, &(0x7f0000000140)=""/4096, 0x1000) 23:51:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') [ 408.002004][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 408.002100][ T26] audit: type=1804 audit(1573429878.186:365): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/80/file0" dev="sda1" ino=16782 res=1 23:51:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4020ae46, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 408.212311][ T26] audit: type=1804 audit(1573429878.356:366): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/53/file0" dev="sda1" ino=16522 res=1 23:51:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') [ 408.532369][ T26] audit: type=1804 audit(1573429878.456:367): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/80/file0" dev="sda1" ino=16782 res=1 [ 408.560067][ T26] audit: type=1804 audit(1573429878.466:368): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949206267/syzkaller.7gdSOE/80/file0" dev="sda1" ino=16782 res=1 [ 408.761410][ T26] audit: type=1804 audit(1573429878.616:369): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/53/file0" dev="sda1" ino=16522 res=1 23:51:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x8138ae83, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) [ 409.075022][ T26] audit: type=1804 audit(1573429878.616:370): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir260197277/syzkaller.kMyoG3/53/file0" dev="sda1" ino=16522 res=1 23:51:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0xa195) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000100)={0x3f, "f64cba2ba99c78171689bb0d7489b41a8d404a6654690568d6e458fb946bbdce", 0x2, 0x1}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r10, &(0x7f0000000140)=""/4096, 0x1000) 23:51:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x40305828, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 409.442659][ T26] audit: type=1804 audit(1573429878.776:371): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/53/file0" dev="sda1" ino=16525 res=1 23:51:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)='4', 0xec) sendfile(r4, r5, 0x0, 0x666b) sendfile(r4, r5, 0x0, 0xa195) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x22}}}, 0xb9, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r7, 0x6e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r7, 0x3ff, 0x78e1a012, 0x3}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={r7, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x9, 0x1, 0x9, 0x9, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001180)={r7, @in={{0x2, 0x4e20, @loopback}}, 0x1000, 0x7fff, 0x800, 0x7, 0x4}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r8, 0x1}, &(0x7f00000012c0)=0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x30, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r9 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f0000000600)='4', 0xec) sendfile(r9, r10, 0x0, 0x666b) sendfile(r9, r10, 0x0, 0xa195) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') 23:51:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0xc0045878, &(0x7f00000000c0)={0x10, 0x1, 0x2, 0x0}) 23:51:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4040ae77, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)=0x400000}) [ 409.805484][ T26] audit: type=1804 audit(1573429878.986:372): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir708883684/syzkaller.RlI2TJ/53/file0" dev="sda1" ino=16525 res=1 [ 409.886883][T10247] ================================================================== [ 409.895155][T10247] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 409.903139][T10247] [ 409.905491][T10247] write to 0xffff8880b747e8d4 of 4 bytes by task 10250 on cpu 0: [ 409.913500][T10247] xas_set_mark+0x14d/0x160 [ 409.918030][T10247] __test_set_page_writeback+0x612/0x7d0 [ 409.923794][T10247] ext4_bio_write_page+0x157/0xb90 [ 409.930236][T10247] mpage_submit_page+0xeb/0x170 [ 409.935193][T10247] mpage_process_page_bufs+0x3b4/0x3d0 [ 409.940678][T10247] mpage_prepare_extent_to_map+0x48b/0x760 [ 409.946588][T10247] ext4_writepages+0x94f/0x2300 [ 409.951459][T10247] do_writepages+0x6b/0x170 [ 409.956316][T10247] __filemap_fdatawrite_range+0x1c5/0x230 [ 409.962162][T10247] file_write_and_wait_range+0xfd/0x160 [ 409.968522][T10247] __generic_file_fsync+0x59/0x190 [ 409.973641][T10247] ext4_sync_file+0x48e/0xb00 [ 409.978340][T10247] vfs_fsync_range+0x82/0x150 [ 409.983017][T10247] ext4_file_write_iter+0x45b/0xa00 [ 409.988213][T10247] do_iter_readv_writev+0x487/0x5b0 [ 409.993408][T10247] do_iter_write+0x13b/0x3c0 [ 409.997993][T10247] vfs_iter_write+0x5c/0x80 [ 410.002508][T10247] iter_file_splice_write+0x4c0/0x7f0 [ 410.007876][T10247] direct_splice_actor+0xa0/0xc0 [ 410.012814][T10247] splice_direct_to_actor+0x215/0x510 [ 410.018180][T10247] do_splice_direct+0x161/0x1e0 [ 410.023029][T10247] do_sendfile+0x384/0x7f0 [ 410.028750][T10247] __x64_sys_sendfile64+0x12a/0x140 [ 410.047959][T10247] do_syscall_64+0xcc/0x370 [ 410.052467][T10247] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 410.058358][T10247] [ 410.060690][T10247] read to 0xffff8880b747e8d4 of 4 bytes by task 10247 on cpu 1: [ 410.070063][T10247] __writeback_single_inode+0x367/0x8e0 [ 410.075621][T10247] writeback_single_inode+0x232/0x310 [ 410.080987][T10247] sync_inode_metadata+0x74/0xa0 [ 410.085921][T10247] __generic_file_fsync+0x122/0x190 [ 410.091120][T10247] ext4_sync_file+0x48e/0xb00 [ 410.095810][T10247] vfs_fsync_range+0x82/0x150 [ 410.101803][T10247] ext4_file_write_iter+0x45b/0xa00 [ 410.107013][T10247] do_iter_readv_writev+0x487/0x5b0 [ 410.112223][T10247] do_iter_write+0x13b/0x3c0 [ 410.117254][T10247] vfs_iter_write+0x5c/0x80 [ 410.121863][T10247] iter_file_splice_write+0x4c0/0x7f0 [ 410.127236][T10247] direct_splice_actor+0xa0/0xc0 [ 410.132176][T10247] splice_direct_to_actor+0x215/0x510 [ 410.137768][T10247] do_splice_direct+0x161/0x1e0 [ 410.143058][T10247] do_sendfile+0x384/0x7f0 [ 410.148427][T10247] __x64_sys_sendfile64+0x12a/0x140 [ 410.153725][T10247] do_syscall_64+0xcc/0x370 [ 410.158405][T10247] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 410.164280][T10247] [ 410.166610][T10247] Reported by Kernel Concurrency Sanitizer on: [ 410.172958][T10247] CPU: 1 PID: 10247 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0 [ 410.180851][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.190998][T10247] ================================================================== [ 410.199362][T10247] Kernel panic - not syncing: panic_on_warn set ... [ 410.205963][T10247] CPU: 1 PID: 10247 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0 [ 410.213854][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.223899][T10247] Call Trace: [ 410.227386][T10247] dump_stack+0xf5/0x159 [ 410.233890][T10247] panic+0x210/0x640 [ 410.248292][T10247] ? vprintk_func+0x8d/0x140 [ 410.252886][T10247] kcsan_report.cold+0xc/0xe [ 410.257480][T10247] kcsan_setup_watchpoint+0x3fe/0x410 [ 410.262852][T10247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 410.269093][T10247] __tsan_read4+0x145/0x1f0 [ 410.273598][T10247] __writeback_single_inode+0x367/0x8e0 [ 410.279156][T10247] writeback_single_inode+0x232/0x310 [ 410.284531][T10247] sync_inode_metadata+0x74/0xa0 [ 410.290971][T10247] __generic_file_fsync+0x122/0x190 [ 410.296176][T10247] ext4_sync_file+0x48e/0xb00 [ 410.300860][T10247] ? __read_once_size.constprop.0+0x20/0x20 [ 410.306760][T10247] vfs_fsync_range+0x82/0x150 [ 410.311455][T10247] ext4_file_write_iter+0x45b/0xa00 [ 410.316764][T10247] do_iter_readv_writev+0x487/0x5b0 [ 410.321962][T10247] ? security_file_permission+0x88/0x280 [ 410.327784][T10247] do_iter_write+0x13b/0x3c0 [ 410.332393][T10247] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 410.338304][T10247] vfs_iter_write+0x5c/0x80 [ 410.342822][T10247] iter_file_splice_write+0x4c0/0x7f0 [ 410.348223][T10247] ? page_cache_pipe_buf_release+0x100/0x100 [ 410.354214][T10247] direct_splice_actor+0xa0/0xc0 [ 410.369462][T10247] splice_direct_to_actor+0x215/0x510 [ 410.374876][T10247] ? generic_pipe_buf_nosteal+0x20/0x20 [ 410.380984][T10247] do_splice_direct+0x161/0x1e0 [ 410.385881][T10247] do_sendfile+0x384/0x7f0 [ 410.390448][T10247] __x64_sys_sendfile64+0x12a/0x140 [ 410.406815][T10247] do_syscall_64+0xcc/0x370 [ 410.411345][T10247] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 410.417231][T10247] RIP: 0033:0x45a219 [ 410.421131][T10247] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.442385][T10247] RSP: 002b:00007f5abee42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.451750][T10247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 410.459720][T10247] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 410.468234][T10247] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 410.476401][T10247] R10: 000000000000666b R11: 0000000000000246 R12: 00007f5abee436d4 [ 410.484367][T10247] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff [ 410.495234][T10247] Kernel Offset: disabled [ 410.499748][T10247] Rebooting in 86400 seconds..