[ 42.345478][ T26] audit: type=1800 audit(1561013997.315:26): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.383997][ T26] audit: type=1800 audit(1561013997.325:27): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.404215][ T26] audit: type=1800 audit(1561013997.325:28): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.137' (ECDSA) to the list of known hosts. 2019/06/20 07:00:07 fuzzer started 2019/06/20 07:00:10 dialing manager at 10.128.0.26:41373 2019/06/20 07:00:10 syscalls: 2465 2019/06/20 07:00:10 code coverage: enabled 2019/06/20 07:00:10 comparison tracing: enabled 2019/06/20 07:00:10 extra coverage: extra coverage is not supported by the kernel 2019/06/20 07:00:10 setuid sandbox: enabled 2019/06/20 07:00:10 namespace sandbox: enabled 2019/06/20 07:00:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/20 07:00:10 fault injection: enabled 2019/06/20 07:00:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/20 07:00:10 net packet injection: enabled 2019/06/20 07:00:10 net device setup: enabled 07:01:28 executing program 0: syzkaller login: [ 133.255491][ T8036] IPVS: ftp: loaded support on port[0] = 21 07:01:28 executing program 1: [ 133.353607][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 133.428112][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.445912][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.455059][ T8036] device bridge_slave_0 entered promiscuous mode [ 133.471954][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.479090][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.488131][ T8039] IPVS: ftp: loaded support on port[0] = 21 [ 133.498952][ T8036] device bridge_slave_1 entered promiscuous mode [ 133.525190][ T8036] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 133.537947][ T8036] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:01:28 executing program 2: [ 133.585911][ T8036] team0: Port device team_slave_0 added [ 133.593722][ T8036] team0: Port device team_slave_1 added [ 133.674253][ T8036] device hsr_slave_0 entered promiscuous mode [ 133.712170][ T8036] device hsr_slave_1 entered promiscuous mode 07:01:28 executing program 3: [ 133.761181][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.768338][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.776137][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.783234][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.846283][ T8041] IPVS: ftp: loaded support on port[0] = 21 [ 133.914405][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 133.997574][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.004980][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.013220][ T8039] device bridge_slave_0 entered promiscuous mode [ 134.030934][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.043173][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.050239][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.058991][ T8039] device bridge_slave_1 entered promiscuous mode [ 134.080038][ T8045] IPVS: ftp: loaded support on port[0] = 21 07:01:29 executing program 4: [ 134.100909][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.119603][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.130332][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.154199][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.168585][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 134.197843][ T8039] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.210410][ T8039] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.258242][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.275293][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.282503][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.290508][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.300704][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.307813][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state 07:01:29 executing program 5: [ 134.350767][ T8049] IPVS: ftp: loaded support on port[0] = 21 [ 134.358654][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.371426][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.387091][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.414962][ T8036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.426834][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.449051][ T8039] team0: Port device team_slave_0 added [ 134.459678][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.467901][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.477348][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.512389][ T8039] team0: Port device team_slave_1 added [ 134.550282][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.594040][ T8041] chnl_net:caif_netlink_parms(): no params data found [ 134.633418][ T8039] device hsr_slave_0 entered promiscuous mode [ 134.671648][ T8039] device hsr_slave_1 entered promiscuous mode [ 134.773887][ T8052] IPVS: ftp: loaded support on port[0] = 21 [ 134.836883][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.844116][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.851725][ T8041] device bridge_slave_0 entered promiscuous mode [ 134.861209][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.868263][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.876600][ T8041] device bridge_slave_1 entered promiscuous mode 07:01:29 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) dup(r0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0xc0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) accept$alg(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x1000, 0x0, 0x8, 0xffffffffe6ade45e, 0x0, 0x2, 0x200, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x5, 0x0, 0x0, 0x100000001, 0x7, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x2, 0x7e6, 0x0, 0xd5, 0x0, 0x2, 0x1, 0x401, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x1, 0x2, 0x0, 0x1}, r1, 0x6, 0xffffffffffffffff, 0x9) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x5e, @empty, 0x4e21, 0x0, 'fo\x00', 0x26, 0x7, 0x5a}, 0x2c) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x1cb) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) finit_module(r2, &(0x7f0000000140)='lc\x00', 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='syzkaller1\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x4) unshare(0x40000000) [ 134.951389][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 134.989022][ T8041] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.012687][ T8041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.079349][ T8041] team0: Port device team_slave_0 added [ 135.109538][ T8062] IPVS: ftp: loaded support on port[0] = 21 [ 135.124482][ T8041] team0: Port device team_slave_1 added [ 135.142227][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.151413][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.159025][ T8045] device bridge_slave_0 entered promiscuous mode [ 135.166611][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 135.232822][ T8041] device hsr_slave_0 entered promiscuous mode [ 135.271482][ T8041] device hsr_slave_1 entered promiscuous mode [ 135.313295][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.320477][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.329092][ T8045] device bridge_slave_1 entered promiscuous mode [ 135.386717][ T8045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.425277][ T8045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.433598][ C1] sched: DL replenish lagged too much [ 135.448313][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.456255][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.464646][ T8049] device bridge_slave_0 entered promiscuous mode [ 135.474465][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.481625][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.489405][ T8049] device bridge_slave_1 entered promiscuous mode [ 135.514498][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 135.540385][ T8049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.550137][ T8045] team0: Port device team_slave_0 added [ 135.560804][ T8045] team0: Port device team_slave_1 added [ 135.570295][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.581758][ T8049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.598095][ T8064] IPVS: ftp: loaded support on port[0] = 21 [ 135.704745][ T8045] device hsr_slave_0 entered promiscuous mode [ 135.741737][ T8045] device hsr_slave_1 entered promiscuous mode [ 135.794718][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.802498][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.809991][ T8052] device bridge_slave_0 entered promiscuous mode [ 135.830572][ T8049] team0: Port device team_slave_0 added 07:01:30 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x5, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000140)={0xc, 0x9a, "d498b3c702bbc53e1a1f9f12695fd5885bcc445d9165dcf3cea5c156209d14a03279f020cb97fc302a72b6e0c1f2b20d6b13ee4d0d6059621c06ce6195292492a915594b487337694e71c46fe10f25c3d6b76f8bc4cf975c949690d1800e234d5bb148090f909cf5bdc24150b79817780456275034fab955e80b18cf2c1ede80eb3b630a54dbc3320b23eac36ed8619ba6fc45a20eda2f987e73"}, 0xa0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f0000000100)=0x4) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2710, @host}, 0x10) [ 135.839996][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.851898][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.874065][ T8052] device bridge_slave_1 entered promiscuous mode [ 135.894189][ T8049] team0: Port device team_slave_1 added 07:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000040)=0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) [ 135.917868][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.926899][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.938569][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 07:01:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup(r0) getsockname$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) r2 = socket$inet(0x2, 0x4040000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x9000004e23, @multicast2}, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r3, 0x711, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80, 0x7d]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xfffffffffffffffe}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8, 0x5}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x3cb4}, &(0x7f0000000280)=0x8) sendto$inet(r2, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) shutdown(r2, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f0000000480)=""/188, &(0x7f0000000540)=0xbc) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10001) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 135.967841][ T8052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.986686][ T8052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.094707][ T8049] device hsr_slave_0 entered promiscuous mode [ 136.132661][ T8049] device hsr_slave_1 entered promiscuous mode [ 136.172210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.180603][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.189015][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.196180][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.203913][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.212798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.221020][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.228161][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.236069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.265804][ T8052] team0: Port device team_slave_0 added [ 136.273266][ T8052] team0: Port device team_slave_1 added [ 136.324967][ T8052] device hsr_slave_0 entered promiscuous mode [ 136.381465][ T8052] device hsr_slave_1 entered promiscuous mode 07:01:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x400000) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000000, 0x20000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r1, 0x1}) r2 = socket$nl_generic(0xa, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x22, &(0x7f00000000c0)={0x0, 0x20000020000}, 0x10) [ 136.438892][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.447834][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:01:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x400000) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000000, 0x20000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r1, 0x1}) r2 = socket$nl_generic(0xa, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x22, &(0x7f00000000c0)={0x0, 0x20000020000}, 0x10) 07:01:31 executing program 0: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x21000a0b) ioctl$FICLONE(r0, 0x40049409, r0) inotify_rm_watch(r0, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2000000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) [ 136.526888][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.540910][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.550030][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.558731][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.583469][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.594179][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.602475][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.610602][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.619268][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.633309][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.644679][ T8039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.668965][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.680861][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.699254][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.713749][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.722199][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.745524][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.769818][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.779492][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.787824][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.796711][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.805405][ T2853] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.812501][ T2853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.813038][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.832874][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.849888][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.859143][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.866253][ T3763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.875276][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.905953][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.913103][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.924135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.933533][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.940568][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.948212][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.956690][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.965059][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.972153][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.979593][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:01:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8000000000003) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) [ 137.024789][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.032148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.062136][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.078332][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.089195][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.098902][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.108131][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.117613][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.130419][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.138941][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.147757][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.148252][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.148929][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.149580][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.181791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.190395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.198819][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.207303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.216827][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.244715][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.255533][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.287351][ T8041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.297781][ T8041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.316172][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.325097][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.333692][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.342102][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.350158][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.360887][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.385921][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.393794][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.411296][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.419656][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.426758][ T3763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.435668][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.512931][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.528103][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.537281][ T2853] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.544396][ T2853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.558498][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.576908][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.590886][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.608819][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.619272][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.630951][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.645473][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.655889][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.688331][ T8049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.726521][ T8049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 07:01:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x1) 07:01:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa029cce98941b86dd6076605100303a00fe809c860000000000000000000000ffff020000000000849de310d0fd000000000000000001920090780073008860c5968e00000000fffc1d0abd0000000503000000000501ff02000000da1ad55100000000000001"], 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@mcast2, 0x6c, r1}) [ 137.777894][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.823468][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.838471][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.856861][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.876781][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.886238][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.900022][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.908787][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.938465][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.961418][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.970667][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.987661][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.994765][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.009183][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.020814][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.035120][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.042215][ T8066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.055710][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.065191][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.091080][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.104565][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.116553][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.128613][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.143724][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.154676][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.166002][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.179889][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.196805][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.222920][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.251797][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.260081][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 07:01:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0xff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x8, 0x0, 0x0, 0x0}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x20000) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) [ 138.322852][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 07:01:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x8001, 0x4, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 07:01:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x7, 0x100000000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="3e021ef4218212d5433ee9473cf4c76c4dd70eecd84047522ad6bb16d5b5926595d4df90ffd7736d7891e4f3d97d7cecf2034cece810a0204f66672860107fd501fee3a4860e62f7ced9d058eede7e388b797b3cea1cb0bfeb7b77b6fd1a369bb5860d449ac0673b93eb22f669b65c32df71ded920351ae1b46408b7675496f3b4665c7bba75e3453039d3a39a609c8ec6a2871182bc9f5dcb0f110fe05a9976bc054555e30ba10cdda8588ab875f5810dbdcb55d325e1a9c933c40b5d317735af3fe90c7e964969276589eaa16231859357f3afec4352493ac17761d299b066f71883ddad1d07bc159a7b37f3b113", 0xef}], 0x1, &(0x7f00000002c0)=[{0xb0, 0x108, 0x6, "f48db3f999f11e841704e62608c9330841ae892db2027425aece77c85ba42f203a93fdb2936fbf06d4673ba378b51210332803e6900ac2275dc292433914d4ec5288c9f0b72cc96e34d28c402747abe157bfd9336ddba74dc961d0298af57e33260a1c665f103c237654fff40a319d84a43b3a7c23c5f97ca9101762ba180cc1273c37edb97749c0210de684aa64f3d4c65f3911d9a58f408e476b2c7ad7"}, {0xd8, 0x10c, 0x800, "32ebcf4fdd34b00f0863ce32bf08f82345d08c23ee1a91c1c02cc183423cc712f770d6e8d7758a808e6e126243dbe9d1543ea6233a39f02659c50b3ad33f4bb495fbc2d7dfb5a64ec1024596ba99f19a5c0e04edda9626871686701f3c2ec49dfa3d29c51f2b39571879be957be4bf3550a9c32b2aeebd03b00ce3a28bea4fb23574cc70e3ceb9f110ad7c4a1d7da479d9785f21c1528da2da81304f7dc47edfa44b44e27e2c62dacbd1a2b0efce4dac7751ca39486276e90a4bc9726ffa9c6e4b73a66d"}, {0x48, 0x10f, 0x3, "1e28fcb69c511ee0ecb45a59cd9f12f8a48a7b808384da4cfc009aa4b823e0bdc435a932ae07d310cc1c35d6de0f12d88934c79daa63fb"}, {0x50, 0x101, 0x5, "29c778e0e3abbbcb55ebae293eff84b8cd4d93e4ad0b200e1011fa781c5ea1f52016e84711518b4ce02df2d52461c7c99f56a3473783d65c0edd8a87f553d2"}, {0xd8, 0x0, 0x81, "87a95a79029b00eed5a6fd1ae2953321defc0c077edd088398c3dce7f2f8e336978990ae6ed464f13dcc9912eb91b4d85f65e29176f97f993cf688bd07325a2f8c8bc0147363a05a5196e03475bb3d8a8054edb98436bf5f3f99423a766f1d21f08dc46a94ce73e551929d5a936c51a3257238fdcbe795a86ae614cf4a9ce81a596dcc66f9733df390375a140730f120dc5d405daad41f024c0dc4bc98af384f896495704fa92cf9083673d64f7ff223dc0e0a4beaba25539597c634587988cea58e262b"}, {0x60, 0x11d, 0x5, "f926e8a662c47e34765daa4667232ccf384d3165d6d5eab64224ceccbcb67f21a68c2ce6fe07560a2e9e0f73b25b18dff02a5ed8bb015c691f84b9418437c39700ccea788d380a932334a5322108fd27"}], 0x358}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:01:33 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd9e49b6de167de15) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) fallocate(r0, 0x0, 0x0, 0x10fffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) 07:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") mkdir(&(0x7f00000000c0)='./control\x00', 0x4) chmod(&(0x7f0000000180)='./control\x00', 0x9c32f69e6caa24eb) r1 = open$dir(&(0x7f0000000000)='./control\x00', 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x3f) mkdirat(r1, &(0x7f0000000040)='./control\x00', 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x8001, 0xfff, 0x5, 0x8, @time, {0x1, 0x40bfe11}, {0x7, 0xffffffffffff4b31}, @addr={0x7}}, {0x1ff, 0x81, 0xfffffffffffffff8, 0x8, @time, {0x3, 0x9}, {0x4, 0x800}, @raw8={"da6d37ebcdb8133da61082cf"}}, {0x2, 0xfffffffffffffffd, 0x40, 0x7, @tick=0x2, {0x1, 0x1}, {0x4ed9, 0x7}, @ext={0x9b, &(0x7f00000001c0)="884f928e3feb20fa47401235d0550929e50f017d7e438c52192e73b8cfc7cf2f32ad7981b663842dcccff727980e6f67b9a937cc907a35fbea046c2c0b86e352693fe2a726d2231328908508577908373375e972995b3cf1fad1117fd05661646047bf403a5fce5c299fe477d9fae81ba1f3cb3ff6d4219fa9699993dac356782d0acabee1b68167e364f047d0476e7ff1772ae7ad7f021cb5d189"}}], 0x90) 07:01:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:33 executing program 4: unshare(0x8000400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup(r0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) 07:01:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) setsockopt$sock_void(r0, 0x1, 0x3af6056231be837c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) dup2(r0, r1) 07:01:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xbbe9, 0x400) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x101, &(0x7f0000000280)=0x2) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r1) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x800, 0x101400) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000080)={0x3, 0xc, 0x14, "d056cf0d553bb7609bce0f0ce2c4a007c50df6b2fb5c597cc2075aa1a9743a694b5ae5798ea935fa56c985822a54543155da89b53647dedfb284b218", 0x1d, "b7cd08967bd659bd94fa5e8e8fda6e53ffa79751a63ac511121a5a0745601df7d8705900ac1eb1f6db2d27d77dbbe556939f083e33fd3840f8e97717", 0x8}) r4 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f0000000000)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x4c1, r2) keyctl$read(0xb, r4, &(0x7f0000005340)=""/4096, 0xd900) 07:01:33 executing program 2: syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x80fe, 0x4, 0x0, 0x300], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30000b, 0xffffff88, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x280241) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) 07:01:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xf, 0x2, r0, &(0x7f0000000040)="7e2e48e3fb004194a92bad9dfa490bf1b67bdee979f33271d7683cede6e0c0dc07d10b49a2d1c3693a22040ec3c6a713b510592c6ff0aa2f9e2db0708baff9583908f6582bab81f5cb966d82cc712a56ffa0ef44692001d16263a77908db49c3134d6c", 0x63, 0x7000}]) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a047fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000a04fcff", 0xfffffffffffffc7a}], 0x1) 07:01:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/178, 0xb2}], 0x5, &(0x7f0000000940)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xb99d}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x7fffffff}, {&(0x7f0000000480)=""/237, 0xed}, &(0x7f0000000800)=[{&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/148, 0x94}], 0x3, 0x11, 0x3ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x100, 0x3}, &(0x7f0000000840)=0x1, &(0x7f0000000880)=0x6, 0x2, 0x7, 0x5, 0x8, 0x20, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0xffffffffffffff81}, &(0x7f00000008c0)=0x2, &(0x7f0000000900)=0x13, 0x8, 0x401, 0x96, 0x0, 0x21, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x1c00000, 0x5}}], 0x128, 0x20000080}, 0x4040) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000040)={0x0, 0x2}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:01:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 139.030103][ T8193] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:01:34 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd9e49b6de167de15) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) fallocate(r0, 0x0, 0x0, 0x10fffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) 07:01:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923310415fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) r3 = dup(r2) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) 07:01:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200040, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/3) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0xfffffffffffffffe, @empty={[0xe0ffffff, 0x5]}}, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x1e1) 07:01:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5e}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x6, 0x80000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000003c0)={0x6, [0xfe00000000, 0x0, 0x6, 0x6, 0x56, 0x10000, 0x6, 0x200, 0x3, 0x46af42fd, 0x9, 0x18000000000, 0x7f, 0x10000, 0x1, 0x7, 0xd0, 0x101, 0x4a99, 0x21, 0x3, 0x400, 0x40, 0x59, 0x9, 0x5, 0x0, 0x8001, 0x5, 0x3, 0xfffffffffffffffa, 0x3, 0x3ff, 0x7fffffff, 0x7, 0x101, 0x81, 0x8, 0x3, 0x3ff, 0x4, 0x8, 0x9, 0xbf21, 0xa3c, 0x1, 0x1, 0xff], 0xb}) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000340)={r3, 0xb4a, 0x9, 0x5, 0x9, 0xb902, 0x4}) 07:01:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)=""/253, 0xfd}], 0x10000166, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$ax25(r0, &(0x7f0000000200)="7302331d2345d174d5baf55a58dd2f09e867b578bb585d4351bc15ade0a8d7b036f4d67238a39455a394b060e93c7aead8d362ea6514c73b6309c5e5c2a309bc65393cd30c1e664296d0844a2e9e456906fab8c3239a0986df722a11ccfc9051973690793c7c42a5c6ea4a4bf25029ac222482c78801ca0cedf35c26c8d7f86022372c285583c6ad0603e839c6b9cce9bd2f02c8399af86a250e7f9ad07ef4a9cf3e37751de5b3fa69d00c0ee779276422facd302ac13cb087cd45a1dc79c8cf40ab6157e5901fedf0dd876eaa67d9867916f2f2f756b2e71d68934fe509dcff029178d4e7f79d20a28c34f2844b26e5b4f0", 0xf2, 0x4, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:01:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:34 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_hsr\x00'}) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x1}) 07:01:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923310415fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) r3 = dup(r2) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) [ 139.797902][ C1] hrtimer: interrupt took 46144 ns 07:01:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) [ 139.858143][ T8237] Unknown ioctl -1071076861 07:01:35 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)=""/253, 0xfd}], 0x10000166, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$ax25(r0, &(0x7f0000000200)="7302331d2345d174d5baf55a58dd2f09e867b578bb585d4351bc15ade0a8d7b036f4d67238a39455a394b060e93c7aead8d362ea6514c73b6309c5e5c2a309bc65393cd30c1e664296d0844a2e9e456906fab8c3239a0986df722a11ccfc9051973690793c7c42a5c6ea4a4bf25029ac222482c78801ca0cedf35c26c8d7f86022372c285583c6ad0603e839c6b9cce9bd2f02c8399af86a250e7f9ad07ef4a9cf3e37751de5b3fa69d00c0ee779276422facd302ac13cb087cd45a1dc79c8cf40ab6157e5901fedf0dd876eaa67d9867916f2f2f756b2e71d68934fe509dcff029178d4e7f79d20a28c34f2844b26e5b4f0", 0xf2, 0x4, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:01:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6081, 0x818, 0x7, 0x1}, {0x7, 0x6c7, 0x3, 0xbaa}]}) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:35 executing program 2: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @rand_addr=0x8}, 0x20, 0x0, 0x0, 0x0, 0x51, &(0x7f0000000000)='bond0\x00', 0x3a0, 0xea2, 0x346e}) 07:01:35 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_hsr\x00'}) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x1}) 07:01:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000081006263736630000000000800000000000073697430000002000000ffff00000000626f6e64300000000000000000000000766574382d863573e35cea0000000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff03000000000000000000000000000000000000000000000008000000000000000100000000000100766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000000000000004155444954000000000000000000000000000000000000ffffffffffffffef000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f767469300000000000000801fcb8f47511b44ef37a691b05000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000000000000000000000000000000000000000000000000000000000f600000000000000000002000000ffffffff00000000"]}, 0x2be) 07:01:35 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)=""/253, 0xfd}], 0x10000166, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$ax25(r0, &(0x7f0000000200)="7302331d2345d174d5baf55a58dd2f09e867b578bb585d4351bc15ade0a8d7b036f4d67238a39455a394b060e93c7aead8d362ea6514c73b6309c5e5c2a309bc65393cd30c1e664296d0844a2e9e456906fab8c3239a0986df722a11ccfc9051973690793c7c42a5c6ea4a4bf25029ac222482c78801ca0cedf35c26c8d7f86022372c285583c6ad0603e839c6b9cce9bd2f02c8399af86a250e7f9ad07ef4a9cf3e37751de5b3fa69d00c0ee779276422facd302ac13cb087cd45a1dc79c8cf40ab6157e5901fedf0dd876eaa67d9867916f2f2f756b2e71d68934fe509dcff029178d4e7f79d20a28c34f2844b26e5b4f0", 0xf2, 0x4, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:01:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) [ 140.337034][ T8257] Unknown ioctl -1071076861 07:01:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0xdfa}}, 0x18) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x30000, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006010800000000ff010000000000000000000000110200000000aa000100000000000000080000000000aa9adf6e6710a9dcb0670625ed510e206f54d6da51e2a63eb507ccc1dceef9745d801907bf4f113a33d1549a67f0f34f1de44b53ef752e54992b8d6e77eac7236f085992da3c915a2285f645a276ef38bb0a42086976cf35d74e8c7e5319d312cead1d67d9cefec82a394f6e1a9f11749842ed7e60afcc98e718952a1b652b5a56e605b7915b857c0b2efc995c2888c5db68439bc5dc9a6dda9bfbd72db49343fa5b56975f29d80c92ac97e662f0fd1f6c"], 0x38) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffb, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 07:01:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, {}, 0x200}, 0xe) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x4, "43eafe3593203664b4003ed741fecb18b92e496acb75ce0c415b395b8aba36c3", 0x1, 0x201, 0x1, 0x86d9, 0x10, 0x2, 0x5b4, 0x100}) 07:01:35 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x30000, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006010800000000ff010000000000000000000000110200000000aa000100000000000000080000000000aa9adf6e6710a9dcb0670625ed510e206f54d6da51e2a63eb507ccc1dceef9745d801907bf4f113a33d1549a67f0f34f1de44b53ef752e54992b8d6e77eac7236f085992da3c915a2285f645a276ef38bb0a42086976cf35d74e8c7e5319d312cead1d67d9cefec82a394f6e1a9f11749842ed7e60afcc98e718952a1b652b5a56e605b7915b857c0b2efc995c2888c5db68439bc5dc9a6dda9bfbd72db49343fa5b56975f29d80c92ac97e662f0fd1f6c"], 0x38) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffb, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 07:01:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xeb}, 0x0) 07:01:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:36 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)=""/253, 0xfd}], 0x10000166, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$ax25(r0, &(0x7f0000000200)="7302331d2345d174d5baf55a58dd2f09e867b578bb585d4351bc15ade0a8d7b036f4d67238a39455a394b060e93c7aead8d362ea6514c73b6309c5e5c2a309bc65393cd30c1e664296d0844a2e9e456906fab8c3239a0986df722a11ccfc9051973690793c7c42a5c6ea4a4bf25029ac222482c78801ca0cedf35c26c8d7f86022372c285583c6ad0603e839c6b9cce9bd2f02c8399af86a250e7f9ad07ef4a9cf3e37751de5b3fa69d00c0ee779276422facd302ac13cb087cd45a1dc79c8cf40ab6157e5901fedf0dd876eaa67d9867916f2f2f756b2e71d68934fe509dcff029178d4e7f79d20a28c34f2844b26e5b4f0", 0xf2, 0x4, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:01:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x30000, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006010800000000ff010000000000000000000000110200000000aa000100000000000000080000000000aa9adf6e6710a9dcb0670625ed510e206f54d6da51e2a63eb507ccc1dceef9745d801907bf4f113a33d1549a67f0f34f1de44b53ef752e54992b8d6e77eac7236f085992da3c915a2285f645a276ef38bb0a42086976cf35d74e8c7e5319d312cead1d67d9cefec82a394f6e1a9f11749842ed7e60afcc98e718952a1b652b5a56e605b7915b857c0b2efc995c2888c5db68439bc5dc9a6dda9bfbd72db49343fa5b56975f29d80c92ac97e662f0fd1f6c"], 0x38) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffb, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 07:01:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:36 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x20000001, 0x484401) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8000, 0x10, 0x6, 0x100000000}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, &(0x7f0000000100)=0x8) 07:01:36 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:36 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) read(r1, &(0x7f0000000040)=""/181, 0xb5) 07:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) 07:01:36 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)=""/253, 0xfd}], 0x10000166, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendto$ax25(r0, &(0x7f0000000200)="7302331d2345d174d5baf55a58dd2f09e867b578bb585d4351bc15ade0a8d7b036f4d67238a39455a394b060e93c7aead8d362ea6514c73b6309c5e5c2a309bc65393cd30c1e664296d0844a2e9e456906fab8c3239a0986df722a11ccfc9051973690793c7c42a5c6ea4a4bf25029ac222482c78801ca0cedf35c26c8d7f86022372c285583c6ad0603e839c6b9cce9bd2f02c8399af86a250e7f9ad07ef4a9cf3e37751de5b3fa69d00c0ee779276422facd302ac13cb087cd45a1dc79c8cf40ab6157e5901fedf0dd876eaa67d9867916f2f2f756b2e71d68934fe509dcff029178d4e7f79d20a28c34f2844b26e5b4f0", 0xf2, 0x4, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 07:01:36 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:36 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x2000) ioctl$VT_RELDISP(r0, 0x5605) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmsg$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000007d28d28d3400"/24], 0x18}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) 07:01:36 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000081006263736630000000000800000000000073697430000002000000ffff00000000626f6e64300000000000000000000000766574382d863573e35cea0000000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff03000000000000000000000000000000000000000000000008000000000000000100000000000100766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000000000000004155444954000000000000000000000000000000000000ffffffffffffffef000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f767469300000000000000801fcb8f47511b44ef37a691b05000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff000000000000000000000000000000000000000000000000000000000000f600000000000000000002000000ffffffff00000000"]}, 0x2be) 07:01:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00000000c0)=""/9, &(0x7f0000000100)=0x9) ioctl(r2, 0x1000008810, &(0x7f0000000040)="e07000377b89638121d9090a3e4c24f955a81f117b01ce139b8176be918fab1080b3eb9f7ae49566c08a8dd51956f630a7d2698ca11a8c023504e2d36bbd5157af65a48b8e4f438a7e3910054872d2e3c463d39889ae5d31038b1f8a2066cd6866c6d401e920f837183b3ed34f9a88520346d7051559") bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) sendto$isdn(r1, &(0x7f0000000180)={0x0, 0x7fffffff, "b80add7ff97759783733282a90b176a31c3d0d4623e55834cd9ce606ed824cde55bc21a453a96b17f7f1f8efc08fed3f8a96a0ef9e1a533954f6935381921ee0256d3b2cccbb636642eedf9aee39a02abad8e75b44e9699eab65942e742639d8689a36cf36b32043bc77ee4605bf0528b33aec42cca18ecb3f30ccb42aa7a070a7a9efa24f626fee29b5afd32040620b42f461984c0833873bf9fb6945aebf83d2c377450074c4fbe2251edb61df4ebada0ed2cb08cb36b2a260da3b96102752de7d40715d1ae6733cb8f13fe4fd1b"}, 0xd7, 0x10, 0x0, 0x0) 07:01:36 executing program 1: inotify_init() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$unix(0x1, 0x0, 0x0) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x14000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000040)={0x1, {0x0, 0x1c9c380}, 0x1, 0xdc0}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r2) 07:01:36 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) 07:01:37 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:37 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:37 executing program 2: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x05\x00\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xff\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd9f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x7fff, 0x180000, "3175d0ec94078ac98423483c53a0a7437308b0c612b806a5", {0x3ff, 0x3}, 0x6}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r1, r2}) close(r3) 07:01:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0x0, @in6={{0xa, 0x4e24, 0xf6a, @mcast1, 0x1ff}}, [0x8, 0xfffffffffffffffa, 0x2, 0xfffffffffffffffe, 0x8, 0x8, 0x2, 0xffffffffffffffc1, 0x3, 0x556, 0x7fff, 0x9, 0x9, 0x8, 0x2]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x7a6}, &(0x7f0000000200)=0x8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 07:01:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) r1 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000480)=[0x6]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="378a4ad7e64f008e04e480dab7be6660e6c65975376ceca8bc47b97b3c59c62a1d9e04911e5986ba6ee35588a23d5504af6106d92ad766ee57cc4b00306add3b1346eb85643ee1b46fc962d981bda2481f176cdf61375206a2bb3ce5d4b22bbd7991cfaca3a60a2a28932c13fe3cd2ba1b041e5a9f6ad0bcce663c42c824ba670b575f0ba252e5a97b09c73fd3d8e9073524ba1beddd986cff22c1454bc40529513409767e6a28159b93c6cfc32d1d6210ee691284a2b436dd98ec486d902ce478322a07b1e3f89a8b9808ce770213abea3553f9ee30611871a500"/239]) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) bind$llc(r0, &(0x7f0000000440)={0x1a, 0x337, 0x5, 0x5, 0x6, 0x3, @local}, 0x10) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000280)=0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x0, 0x1, 0x7fff, 0xffff, 0x0}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000007c0)={r4}, 0x8) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, r3, 0x3}, 0xc) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="0206080f0600000028bd70f2fddbdf2502000b0002000000018000000000000002000b0000000000c500000000000000"], 0x30}}, 0x4091) r5 = gettid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r6, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000008c0)={0x1, 0x102}, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0xffffffffffff8001}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r7, 0x6c, 0x30}, 0xc) 07:01:37 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:37 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:37 executing program 3: syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) 07:01:37 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'permprofile ', '[procuserbdevvboxnet1\x00'}, 0x22) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0/bus\x00', 0x102) 07:01:37 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/169) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000280)={{0x7b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'ovf\x00', 0x4, 0xaed, 0x4a}, {@multicast1, 0x4e23, 0x10004, 0x0, 0x7, 0xffff}}, 0x44) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @random="ba4b976fff68", [], {@can={0xc, {{0x2, 0x1, 0x4, 0x7}, 0x4, 0x2, 0x0, 0x0, "9d7e75e04b6b54e4"}}}}, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000100)={@dev={[], 0x10}, @empty, [{[{0x9100, 0x10000, 0x200, 0x4}], {0x8100, 0x9, 0x1000, 0x4}}], {@x25={0x805, {0x1, 0x4, 0xff, "7e3e690d48f83bf5180311fdf0048b71f69ea31f44e34af857f2ccfd3e8bcae7f5cfdd8d7026d554469426dc7c8b289907e55f942fe13115dc0cf9f49bdfd2b6728817dd7dfecdd398486d415c37b7932027ec750ead85952be9abc7299abb79d9ac20b63dd9429c53281421a28bbc"}}}}, &(0x7f0000000200)={0x1, 0x4, [0x8df, 0xb3d, 0x2c6, 0x227]}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 07:01:37 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:37 executing program 4: socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x2be) 07:01:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x23f6e98825896a84, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x5, 0x8, 0x53b, 0x19, 0x5, 0x0, 0x9, 0x2, 0x3, 0x5, 0x3f}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x2ca) fallocate(r1, 0x20, 0x2000, 0x10000) 07:01:38 executing program 2: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x05\x00\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xff\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd9f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000000c0)={0x7fff, 0x180000, "3175d0ec94078ac98423483c53a0a7437308b0c612b806a5", {0x3ff, 0x3}, 0x6}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r1, r2}) close(r3) 07:01:38 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2be) 07:01:38 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) r1 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000480)=[0x6]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="378a4ad7e64f008e04e480dab7be6660e6c65975376ceca8bc47b97b3c59c62a1d9e04911e5986ba6ee35588a23d5504af6106d92ad766ee57cc4b00306add3b1346eb85643ee1b46fc962d981bda2481f176cdf61375206a2bb3ce5d4b22bbd7991cfaca3a60a2a28932c13fe3cd2ba1b041e5a9f6ad0bcce663c42c824ba670b575f0ba252e5a97b09c73fd3d8e9073524ba1beddd986cff22c1454bc40529513409767e6a28159b93c6cfc32d1d6210ee691284a2b436dd98ec486d902ce478322a07b1e3f89a8b9808ce770213abea3553f9ee30611871a500"/239]) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) bind$llc(r0, &(0x7f0000000440)={0x1a, 0x337, 0x5, 0x5, 0x6, 0x3, @local}, 0x10) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000280)=0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000004c0)={0x0, 0x1, 0x7fff, 0xffff, 0x0}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000007c0)={r4}, 0x8) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, r3, 0x3}, 0xc) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="0206080f0600000028bd70f2fddbdf2502000b0002000000018000000000000002000b0000000000c500000000000000"], 0x30}}, 0x4091) r5 = gettid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r6, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000008c0)={0x1, 0x102}, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0xffffffffffff8001}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r7, 0x6c, 0x30}, 0xc) 07:01:38 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:38 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2be) 07:01:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000000000003f) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dc86055e0bceec7be070") ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20ffb000, 0x7ff0bdbe}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000100)=""/96) 07:01:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000340)=0x4a32, 0x4) timer_create(0x1, &(0x7f0000000040)={0x0, 0x3b, 0x7, @thr={&(0x7f0000000000)="c931ce14944089c38edd17bdff44998b86e460365e1449fd22d6eedfa5c443df", &(0x7f00000001c0)="3755b923b85a35c81f4735abfb138167069d8aaca40e34ddc1c3d11b7b3cf7df0bc2b2f9db85affd7b9da34ffd2e4631a4b568e976b5286f4ae88b2de2e23b3d0dc7faf00985790a34ba66fb413d4467e08f45da983055f1e00cfa55175d7310f16b4102cbec84a568f47f6df2074f01347371ce7fde107014b7a70dd5d33ce7ef96e9082768bcab498658d0a5ab183a64b70d203ccc5fa9e9c76f7412fcbfd7783074e59e69d572cbaac52f0214362aae372b30e839c3e06ac49ac90837ff30956055c3ed72ad080125f5e256d1c6f3ebe2f34b526d1ce8174483d9e82f32c840ea65"}}, &(0x7f0000000080)=0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000380)={0x6, 0x0, 0x10003, 0xfffffffffffffff3}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000003c0)={0x5, r2}) timer_getoverrun(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)=""/63, 0x3f}], 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RREMOVE(r4, &(0x7f0000000300)={0x2}, 0x7) recvmmsg(r3, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) 07:01:38 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2be) 07:01:38 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200101, 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x1) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000100)=""/149, 0x207a0ba5) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/180, 0xb4}], 0x3, &(0x7f0000000480)=""/103, 0x67}, 0x9996}, {{&(0x7f0000000500)=@ipx, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/34, 0x22}], 0x1, &(0x7f0000000600)=""/167, 0xa7}, 0x35e}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/253, 0xfd}], 0x4}, 0x7}, {{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/242, 0xf2}], 0x1, &(0x7f0000000cc0)=""/139, 0x8b}, 0x401}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000d80)=""/188, 0xbc}, {&(0x7f0000000e40)=""/100, 0x64}, {&(0x7f0000000ec0)=""/15, 0xf}, {&(0x7f0000000f00)=""/125, 0x7d}, {&(0x7f0000000f80)=""/132, 0x84}, {&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/144, 0x90}], 0x8, &(0x7f00000021c0)=""/190, 0xbe}, 0x100}, {{&(0x7f0000002280)=@hci, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)}, 0x7fff}], 0x6, 0x0, &(0x7f0000002500)) connect$can_bcm(r1, &(0x7f0000002540)={0x1d, r2}, 0x10) 07:01:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) gettid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0) 07:01:38 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:38 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x9, 0x1}]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 07:01:38 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3ffffffffe, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x5c1000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x400000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000280)={@bcast, @null, 0x2, 0x76}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc008561c, &(0x7f0000000000)={0x0, {0x9, 0x9255}}) connect$ax25(r2, &(0x7f0000000300)={{0x3, @null, 0x1}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 07:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 07:01:39 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:39 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x408800, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = geteuid() r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:01:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) gettid() openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0) 07:01:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$adsp(&(0x7f0000001640)='/dev/adsp#\x00', 0x4, 0x10000) bind$inet6(r1, &(0x7f0000001680)={0xa, 0x4e22, 0x6, @loopback, 0xf500000000000000}, 0x1c) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x23, &(0x7f0000c86000), &(0x7f0000000080)=0x3924) 07:01:39 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:39 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x400000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000480)="882994d1d5cb17301c79e40443cf6a260251c44960ed914d56ccebbd80b77799bd2ec55866191202c070312aaadd940fb68e28d4aa75f1a4528f97afe499c6c08c2abd11b21b7eb9c310d5f5945bb5d6f0e784425716898af3737bcbc5f7d9be9072a7e5c41cc9ec6ef9f79e3efc7f50f14ee3b466e81d66fe3f2e33b2576dd4f3ec9cf1546b106b1336b30b594c59cc3f6a87ca41802d1ab478d82e2d07b75bec1592cc43b7db86c35f0453521ec9f40f09bf2d49a486550ac61f0c58b5672749d32e8be88598421c2eb3410d"}, 0x389) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="6b1d9bded4647bea18c51203b5fc5bb154a2b7fdeefef35dfc06000000787eccba1672b8", @ANYBLOB="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"]]) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x81, 0x10}, &(0x7f00000001c0)=0xc) 07:01:39 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:39 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 07:01:39 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) r1 = timerfd_create(0x9, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") timerfd_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 07:01:39 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x3}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x1c7, 0xa, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000140)={0xffffffff, "9f1cbdcce9d8e340c83737d9fb5127c5ae840a3a7787fd0a03bf30072143dc9b", 0x2, 0x1}) 07:01:39 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:39 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) lseek(r0, 0x1000023, 0x3) accept(r0, 0x0, 0x0) 07:01:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x8) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x3}) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) ioctl$RTC_WIE_OFF(r0, 0x7010) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x17, 0x36, &(0x7f0000000200)="d04191fe2ce454a80a30b61be345bca912824174ccdeab581e460522257b9a7927b89ccdcd8229b6899f741d873af093dcbe69fdfb24"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) 07:01:39 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e20, 0x1f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, {0xa, 0x4e20, 0x8e, @local, 0xffff}, 0x44ad, [0x9, 0x5, 0x6, 0x100000001, 0xff, 0x2, 0x6a2, 0x7f]}, 0x5c) r1 = socket(0x200000000010, 0x80000000002, 0x0) write(r1, &(0x7f0000000200)="240000002a007f000400000000ed0300000400ff010000000bfd0000ffffffffff000000", 0x24) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0xffffffffffffffff}, 0x28, 0x1) 07:01:39 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:39 executing program 2: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000001080)='/dev/rtc0\x00', 0x201fe, 0x0) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x11ba) 07:01:39 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0xfffffffffffffff9, 0x0, 0x2, 0x20, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, &(0x7f00000001c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r2 = socket$inet6(0xa, 0x6, 0x0) getpeername$inet6(r2, &(0x7f0000000000), &(0x7f0000000080)=0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfffffffd], [], @dev}}, 0x1c) 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x8800, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:40 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x5}) 07:01:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x440001, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 07:01:40 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x0, &(0x7f0000000080), 0x4) 07:01:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x140}, {r0, 0x1}], 0xce, &(0x7f0000000440)={0x77359400}, 0x0, 0xa595) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0xf5f272622426574) 07:01:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8203, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x56, 0x1, 0x7f, 0x5, 0x0, 0x5, 0x20010, 0x4, 0xbe, 0x8, 0x7ff, 0xfffffffffffff800, 0x104, 0x8001, 0x9, 0x774, 0x6772483f, 0x3, 0x1, 0x7f, 0x3, 0x9, 0x632, 0x3, 0x9, 0x2, 0x4, 0x1, 0x9, 0x3, 0x0, 0x1, 0x4, 0x5f, 0x9, 0x20, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x400, 0x400, 0xfffffffffffffeff, 0x7, 0x9, 0x0, 0x1}, r2, 0x8, r1, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551a, 0x0) 07:01:40 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffd}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcf0c8c0c3b") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x7ff}) 07:01:40 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x0, &(0x7f0000000080), 0x4) 07:01:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x0, 0x0, 0x0, 0x0, "a68054"}}) pselect6(0x40, &(0x7f0000000000)={0x1f, 0x2, 0x4, 0x97eb, 0x200, 0x59, 0x100000000, 0x8}, &(0x7f0000000040)={0x2, 0xff, 0x6f1c, 0x3, 0x5, 0x4, 0x2, 0x9}, &(0x7f0000000080)={0x3, 0x8, 0x7, 0x7, 0x9, 0x3, 0x100, 0x1000}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={0x1}, 0x8}) 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:40 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x0, &(0x7f0000000080), 0x4) 07:01:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000005, 0x614}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r3, 0x800060c0045106, &(0x7f0000000000)=0xa) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 07:01:40 executing program 2: getresuid(&(0x7f00000004c0), &(0x7f0000002500), &(0x7f0000002540)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000002680)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000026c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000027c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x7, &(0x7f0000000400)=[{&(0x7f0000000100)="d69869e8acff9781506d110836dff9c3d21d13e8a837e45d9e", 0x19, 0x9}, {&(0x7f0000000140)="5feaa759a5445a5a48406a89a57a834ebb7876f875916dcc4b584c0024406f4c2e41083c5b1cc4519d9be0463863cc108c2da77e0ecf413e310fd68c5bf0ace92f9759c35dfa8d1662cef77c7940d4106d227c19ca58e8ab577695a9dc7eacde1c9c075ebbd50dfcb127b6904eed2b7085ee112908dbf12e353498ce4a048714ef", 0x81, 0x489}, {&(0x7f0000000200)="3832225a968c90b01f3d068e46a19cad9f0417f17e5280d46d217e8949473ed36749cd0bbb9395a4e1fba24ffeb3175d73ef86ebdd28092e9525305b", 0x3c, 0x6}, {&(0x7f0000000240)="93d3", 0x2, 0x3f}, {&(0x7f0000001500)="fe5e7ec1187c47eaae4c599500772e1dab98cea8cf533757ffd372e592d0106f7cdd8b375a7f5d1a1efcaceb57669e7eecce9a36ad8afbcb31caf305a076d52a25ab36f5a7ecd9a99a81b985cb9f90b9979849a761904455129ab4b413782259e7a4759a76dfdf5d54ca86ad04465ccb339caf33430c7a62d5fb909fdfe47b2fede713b9fae610b089df4902a33b28738ead6fa42ea5718da1a641d643d317ff7157bdb292c9c62c056ef582ef86f7648d3805beaf7a5fd057b326e4844d0c91e3bcb8d29a1fa2496f463d86e51c45005a8b8a9f73d994df06f21a2c5e64617a1b7cd3b3c33f88500b5c2c35b2ff66b99136255345d899f59fa4a97869152cf1d77214e1d02652fa8b27a3e849aaaf3e6d81441935837594194c5ca46aa23d5a9f95075f8e5b527d8e20acbbdff7f27bac8b026c4e9b86c0b09a0ef745726a4b8bd72b29a652bfdd4cb7b498fdf375906489e144e2d778e27c51b92919da09a0bc76a58a067a66ddbefb46b34b94c9906aefda55943ab2fd703d73be9161e4bf2c64b4705fc46c650a2fa1d4f93a2dbc99778c8e3d48a189268254da70708780c08ed2b0147ad4b395de025e9b9471b2e0b790207ea256f4d4847cc5c42db7063b1993f66b98aaf7291b1120729bafda886036f8a6aa8cc4c58811966e9173bb960368084c52f630e764adf03a5a158830accbc0de34c5766235650827e1359a525f8129da5ac8bf99eec4380a0fe4292e0fa5363b67b2e2abab64a976904c4bec0d865b0ab3d6f569866eda2eb3e97b2d06dfd56b49efe822701b4e0bdeab0ad8207a88582bc390ee45bf3f52a5d6472428a72dbd7ae28325367124d7206073eee24af9c02ac1272fd5e6baa147f7b4398a1e75dd3dd166b031e1d9835c03466df62735d5f154d0f91d28ca242fdfd18dc79a61fa5b8f9e2ffd34414bcf645267cf6d337a16f13c0be008207901291f190a36334159cfe74d4a9215d7beee5857565206005effaabe5b31800c20f9eba3ea4cd603e5fb80f3b9baf105edcb9dc19c1930dfb75a16a40e8bb4d29705016906a896aebde098d7283bf1c3525a87dfed5e5d8aa560cae458b7558e1e46c2d2581e30a43a2b2073bfd3498616a0c8e5e6e24056ddb02229e8314ac5bc91a7d777adf9359f93dce783b3cc3e8f2d05f800b9a314f39afa454ea6ce4e71983c40fe73c061f120633498be28557f97aeb9390a78530f756eaac81fbbcf875fcef532fc807d36bedb748b79515cdea1974a41eaadd130bb60865cecc1d175d7b0d1706375d05cb1046a08146e3c8f7b6aa8b9f041b3ba38dc55e3953135c05fc9dc4914500af3f96d8ec50a21fb82a2e695bf943caea7368de294fddea9a04e584831abe641b25b70e83119c3e1f0df2650575aac9a6f4a05af948eb42b33a964154e2b567981408198f8e9fc245917c68f3bb6bc1082717576d987d68635043b3e700dddffe099354f601e7c83462581db664e89c94e32543b85e045e435f129291cdf88eae2a276aa3a7fa0dc397727aa407ff94c2bd07a419573ed2754175db1c3c198d7d969fc2fab57cdb0830ceb9cc2274e1b29b1ba51f9d1c83839a8c5bd5f7045df06f220190e72964b1bd34cdb7b8d0634542c2761e366a8044659cf9d291656f6c018ddd1a2abf79f7c80b0d04cf8bba194ec9f4a2a48661313d6a09350e7aebb963d5d12c7086d5296344eab2743d57acc1a2843757fab69f237db71b434717a800ee6bfc46e813aade6bb4f6f6780d79583558d10fb3df2c1c16dedebb955072a0d7a03e3d6d983908611348282a56d6bbd4b62a01962fd4e7830d0c66ff716e069bec009ef5e94748d5c9190760d3bff8b579080e12a9c7c32c86c283c516fc4cf250ef576e633afd3b3c6434cbf4045f8468435ee5137e13ae12d53d72db72cc3a7a37c87373f82dcf74b0f214b3d38a44e55e700e6ecf645de43bbf2cc894649257a254357ded9028eac9f9fc6238f281b094b593852dcc3aac38975c2a6c73014aa15b0a437314b52cf57cc2a4990bb5d2c7771fa6938b9c0ae440c59adc2f8213808539de6abc190d99dc83bbe3104e7263282d7f4b2642980a7a7c10b39a78fb4bcc6db890a89811d5c6206a236e09543ab853ff7125db82cb2e537dc889aee5ea17e38cd6e2c6a27de2c6d0f3f06635d99150b9ae359625b48d38c9866d84c116cc114e5a0340eef64021d9f4c6e4c53bde798ffe3cdd68e3c76b8c0976f7388a943c31b7ca28320c6d4d7c1b9c97eba9da9a219dd14e801f199c54080c7913f6e3213ab4fa7ca1ce310e8b028a23a812a530d6c44bd1a6758ed212bd66df3ae7363832d117821459244bc1bbb9b84aa5a6a278dcf032baa8b288aa9c505d35588eb3571ca046eeb4382c1ee764172aa1e02d8f94f8ffc1690efa304b38deb088344217d75235682d69328835e7c4a1b09d08bd78f707fef49e3a841b1511df698c8cef3c7fe40a40eaedb15376009721a65ca21e3da27ab33b258c6ba13b237efa325bc77c22e04246e86cbc928e418a608924ba30ebfba0e8ce8034d9d192b660667a1ce3205899e1d4e59b38e1bc190172a071d7ca5c324d67d9dad332d11c13e2245e69f1c45f5bd4e4d43edfc8384e73684ddea906ed91cdc02ce33cc6291762d33a0ef496b83970730fecc293158d12f62247f77908bdb26c81ae762437089e881faa04fabde662920b62dfd748f9e000060dae44a82e4b480eae1a97a21419dd76083c96ef64a68cfa10c8a0944da2317acab31c1c3713aeeb21ee5ee3156425ad547da0c37dc2cdba901e3d2086a3118c354661175a21c6fcc84f66f5e61af65d91d1c1e8e0f06376acc5b6850d11baab672c2c919d154a2464b0b1e22bf9dfc6d35a97e775efce982174029a9ea0c5d75387072117e1b48c3eb61ec6b43ee3d0d33e75d83494b190735c34cae3dfa1906f8b3ad315f2987014243d8876ca135919f9902252a78b37e4277d996003634a39ecbcf2b2c9ad7e8314b9d01bcb4a4b048116e9a472b1c09329166779d11118d034a913e102f6d094add95f36db7d097326fdc93a87a7336673b202b0988cb4fd02e8c219626c0902ab6a7b752ba7ca3e3fbab1e5aa56d4a689c4624c45a7aec4884bb08bc8be997324bf83b588572be76c815d2ab216290eca010423ec28618f0ae33f9590802499cb056368c974390e499f95631bed80a512e51d986ee7f6805c8a84719b8cc3d3e22e4548543e5af245d054cdbbfcbe4b8f62a21fbb9ec8b694b3a6e1b63af776d20c46ecb678180ccba460639017ac40d066bbdf71a7dad8c2331412b8bfc6b242c5c147c30c118469cc15b0c7561e70ab55d3e518e840fb84accb47ef132c7307a677cbbbdadf7d2a2ef3db1f86400cc49f1a6930857b370031ffb834a79b9235df76cdf3fe044928de9af8c69e3fb250b6ead1e74d44c3df694b2114628a66478fc5e4e4f6e6a6b16234970e469ae8cad3b8eeed797663351d5c7fb5c74a117ca2dbd52f7fb6935b308520fec89b6c064a4c96bbaa9f2360753f0f8743b49f32f11992ac0bd27679b8d9a227abe30471140f5368cf71d742e1bdd0ab2a8bab3cc5092775e4e023174bef3afe95ad8c74867be789cef90e0e6217686ca71e9caa7278063568e34667683179af60cb15a40292e9fe32ad5e7de30e922a8cefebb7c65cc6d5cf49acaabb2404763f5c9c78d7c2e2f27e734da10b693b0aebbadf329d81ddb4dfbbab937c22ab068744a07592451881832e56745b36e59f9bb4f61b9b53594d1158a9bcd8669469d51ae7d6f0b3567f845d8f73fbe49d9136a263ffe93da4e540574e53f1cbe2bc4c46b1e3d0efd9582f30d353b4150e447cc9bf92aaff7429387df78a2ec1cf31766a7337d42cbce6484feb4c7f218827cf6d494565811803b51dc62139afc6b6baba384135b1a22f50f8e55f3bd23c1e30ae9e7eec892afb230da181f4d758378fc1156faf014edf24a9787ec7d7b7e99808d24c083bf43eb5b6658f6b8cc98e85b5e89dae96543ea6e7fe29a70dd1f9d40a961b176b5c5e2730f6ee03462a7fbb31f2d0c56ebbbedc5fa6372f2cbf914a034ecabe2017114d60c91e05c92527b9374a31d4bd3d6c8d96505f4a5dd8d60dfe16accc8efb90a99ffa0ae4bed6fd3bec956cc77ad50117ea2aecc0fb2f4430876dad983886628118c75b99bcabe3afb75db9d3ce469d364bebfb1f39ab05d8cf4e685b9caba427ac5b02479f348484898e4ebd043009946f8e2979e70666cd089042be9210aaea8168b9d777e8265781be00204768655888ed3f7c6ab4293120f1b8172a96a915f7ba5793d2d072a929796227cb76a4719642ceee648d2f81a13dc84b8430be85b804a8f3f8d68084f41f1c889ef7aedde926dace6b041d4324e8d9a7414250011d61a6f349357dece87baa1a6ad42bd00e73e8abe3f1450b567ec7d9ecd4a09f0f66e2166a2b454ed677c53695b9e60a5b7f2b356e35cc4655d1bca9eae2965fc40db890b40d49a12392293fa67d2e4df80ddd0986e953dd17946bb99e40a44ac494e600d5715ea0cd0045607b3af4d5deb9c2c4c4b7979e7ef9fb3ba1832648d1ef581dca40224a8944e0ad742e3ed27e10a6392d2ed0497a9529a2165141524e1c66901e50db81a4df81060501a4f87a05649e65092ec8bb81a73dd53cb8cc96dceefb6f17007fe314c297f072b5d9e95b6e7ca2175d4c58bc2461abe4af2279106190ada60389f4d901e4f86a790e610473ca7c10a5edde3984ad90a2bccca41a507a9521cec77b762e9b5960a358e66cad793f57662c7b6758334555f729819078cff42b810610c61dc918bbf95a077e3eb9de43c35e111270013ad46fac7feadaa7fefccb722ee370530e19898e4dfda4b662ade144373eb9949c04a46f34e6112324069485dfe869ca754d2cf3e0fbb402b066bb51ef87be75879c88659efccf9be9ec60cee8b0cea8791e00cca93129b5f6a04e206126016f9904d7cecc890555102a5abceee76c947717793b8d2add51bf528162ff4277b99c7792bdcfc59f113a58b8e626755565846262f4a891fc189664ffdfbe4b706f43a4aa5224eba2fda126abd6caa7793891a5890ea0a29a489704631c1a4787a405a3550a772adbebb2927837abde69dc1605fb35b9d386cb3ece52ffb9239d5921f2769b034e007059b2008f95dd8f13a9f9d79d6c407eed5d23bd2243e9019209d741b15eb06227905ed8b77d3d9b1ef8d9b248c34aa945bc0c3fe06b089ac1a56e1aa6efe4f0fdebe09ac9cfd1591468b7e4a2e32d9205147901fb0497c246af15ec2c5ad3122e3e05a581d9a4ce442f6d96d3d4ca222dd1b632b6a0955aa99b0f6dd4ca51c1edb3304171b29a65b7ecc742dfdc99828c4e640772514aa10ae51b624dc0632bb2c31df34e6334b2e2f4915d6177928a53d8c1e727d011a106e8aabb34e400bfb668c8bf79149ef8e49d72872872db24d02c7170267bf4599f89e307c72b0732a8a9629607fb9b5d9cb5aa9bdf0fdbb940f4e16b33b9430c4f08cec2920298cee5d24f3e46048bcb8dcbe7dc6ff661baa297a6fe694bba4f3b08491c40bdddd11c8350ada20b55ce0a0c72e5a2b5d28aee48364ca6f0f1db3bb1b596565323c54e678ad3ab668993f42248b701138d6e2055520d06311804ae7a6fd166435bed8630958f22b11260eb02a86ff39a999cf0720153c6a459b5f9288f0a06bebf62111a9d2851aa20f858c3248dbbc27f18349b948478a07c2ef1bc913687b5fdccb", 0x1000, 0xfff}, {&(0x7f0000000280)="8020f53498475ec197e6fe2d611aa3a7f7cf6ec5e372e74403990cfd8aeca1a14f97764660db6a666b6e910af260e91f9654143a1883034fa873e5f0de898c0a6f31e84f20858f1fb2ac5855a6354ea0448586b949efcf399adc791a91eb880a16bc36b2", 0x64, 0x4}, {&(0x7f0000000300)="c9174fb0f327649f15b996f5bd9338dc910c4f2e0d08157bce348267820e66cb7f992f9c3ad617d5cdd91ce4d80b06de8756acde131aceb4029d9ef040cba7a9cdef3d2b5f6a8d3ba4f13fdb7e265e192e3c03bbe9841fd4db6b2493aa9edc7c30bc2b46ac24459cea40cc12d4f4ac8c0f43f78aed2dad7dd5167f52e2d5a8d935a44e29db6ddcb6da0b36cf415266e445a099097b9914419b547f2d13f94ddfe7f3d01b43c243e6a365ba2a3e1cf0049979465c9a81640dbb67065002a72f031653348552982ce31b637fb69d6a828abab14ddfb694c351ded34147ea8f1f99f99aee37dec1940eee82dbb1c0ffe7", 0xef, 0x2000000000000000}], 0x200040, &(0x7f0000002800)={[{@norecovery='norecovery'}, {@quota='quota'}], [{@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, '/dev/hwrng\x00'}}, {@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', r1}}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r2}}, {@obj_role={'obj_role'}}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0x440, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) read$FUSE(r3, &(0x7f0000000500), 0x1000) pread64(r3, &(0x7f00000028c0)=""/52, 0x34, 0x0) 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:40 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000003, {{0xa, 0x0, 0x0, @mcast1, 0xffffffffffffffff}}, 0xfffffffffffffffc, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0xfffffffffffffffc, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 07:01:40 executing program 5: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) 07:01:40 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, 0x0, 0x0) [ 145.728830][ T8638] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 07:01:40 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100000000000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 145.776224][ T8638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.839959][ T8638] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x10bcb63b) [ 145.872497][ T8638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 07:01:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x8, 0x2000) fsetxattr$security_ima(r0, &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@ng={0x4, 0x12, "c1327cf60ebda864e326b6c7e092f848"}, 0x12, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000bc5946f17cf3e060db1c732328100d19450246bc0eba6487e7ce181032a36b5ef79a25892333260890777489e0d5619dfc04d65eee491990242159eee6913820c53de5f2fad74021e15a5dc63fe4e6004d3eb22f6f9f9c2f2a251d4dfcfb7e1912a5f1d07d229e3b83abb34f5e8c43951b0f8c0344c28affd0ea7264b074cf749f43a4bfedd61d9f011cf37350e8d44ea9348ceaf7250b241f1d51bcf0d446cc07f03878bc0b2fc664150aefe6aa5e86feaab8e86784d6a260b1773c7bfcd919d19c2a58d691251ef472ffd4b109b4d9a768620f", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25080000000c00020008000500060000000800040000040000180001000c0007002d000000120000000800080000010000"], 0x40}}, 0x50) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x851) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x1000}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r5, 0x400}, &(0x7f00000004c0)=0x8) recvmmsg(r4, &(0x7f0000007780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 07:01:40 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, 0x0, 0x0) 07:01:41 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x8800000000000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:41 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, 0x0, 0x0) 07:01:41 executing program 2: r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x98) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x68]}, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 07:01:41 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffffff00000000, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x8, 0x2000) fsetxattr$security_ima(r0, &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@ng={0x4, 0x12, "c1327cf60ebda864e326b6c7e092f848"}, 0x12, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000bc5946f17cf3e060db1c732328100d19450246bc0eba6487e7ce181032a36b5ef79a25892333260890777489e0d5619dfc04d65eee491990242159eee6913820c53de5f2fad74021e15a5dc63fe4e6004d3eb22f6f9f9c2f2a251d4dfcfb7e1912a5f1d07d229e3b83abb34f5e8c43951b0f8c0344c28affd0ea7264b074cf749f43a4bfedd61d9f011cf37350e8d44ea9348ceaf7250b241f1d51bcf0d446cc07f03878bc0b2fc664150aefe6aa5e86feaab8e86784d6a260b1773c7bfcd919d19c2a58d691251ef472ffd4b109b4d9a768620f", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25080000000c00020008000500060000000800040000040000180001000c0007002d000000120000000800080000010000"], 0x40}}, 0x50) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x851) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x1000}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r5, 0x400}, &(0x7f00000004c0)=0x8) recvmmsg(r4, &(0x7f0000007780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 07:01:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040500003d00040566bd7000fcdbdf250e00000080020700d9c12081f9ece968abff4fa7dcfe8a5fae61f13991759fbd70949badc5711aaac40590f96b2c0600000034174873970bae509e45ba5f1c7f4fc58f001891a4854dd35353a1a3451bc784b07008000b00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x504}}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000330029080000000046c3f1d9982e99b1e71704000000"], 0x18}}, 0x0) 07:01:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x8, 0x2000) fsetxattr$security_ima(r0, &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@ng={0x4, 0x12, "c1327cf60ebda864e326b6c7e092f848"}, 0x12, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000bc5946f17cf3e060db1c732328100d19450246bc0eba6487e7ce181032a36b5ef79a25892333260890777489e0d5619dfc04d65eee491990242159eee6913820c53de5f2fad74021e15a5dc63fe4e6004d3eb22f6f9f9c2f2a251d4dfcfb7e1912a5f1d07d229e3b83abb34f5e8c43951b0f8c0344c28affd0ea7264b074cf749f43a4bfedd61d9f011cf37350e8d44ea9348ceaf7250b241f1d51bcf0d446cc07f03878bc0b2fc664150aefe6aa5e86feaab8e86784d6a260b1773c7bfcd919d19c2a58d691251ef472ffd4b109b4d9a768620f", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf25080000000c00020008000500060000000800040000040000180001000c0007002d000000120000000800080000010000"], 0x40}}, 0x50) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x851) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x1000}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r5, 0x400}, &(0x7f00000004c0)=0x8) recvmmsg(r4, &(0x7f0000007780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 07:01:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0x1}}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x80, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="00002dbd7000201000000000000008000400030000000800036c2f000000080002000a000000080001004e20000008000000080004000100000008000200020000005c329c433e44b8696468cc0b602820c0988561fcb23010a831618b510e91cd74f5be15f9ba0aa07ca23495986531c71abc05e94430b81621a5782fd5730b0760875687544944ae6fa9183f774700000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4000) fchdir(r2) r6 = getpgid(0xffffffffffffffff) sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r7 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r8 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000580)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000340)={0x6, 0x5, 0x7f, 0x2}, 0xce) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r1) fdatasync(r9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x80000000000000d, 0x801, 0x0) 07:01:41 executing program 0 (fault-call:2 fault-nth:0): openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 146.405126][ T8688] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 07:01:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) r5 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000300)='userproc/]:\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x6, r2, r3, r4, r5, 0x14, 0x8}, 0xb1, 0x9, 0x3, 0x2, 0x1, 0x37, r6, r7}) r8 = socket$inet(0x2, 0x80001, 0xfffffffffffffffd) fcntl$setpipe(r8, 0x407, 0x2) 07:01:41 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:41 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 146.471127][ T8688] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 07:01:41 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x3, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), 0x10) 07:01:41 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 07:01:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2216096b7b0070820747000000000600000200000000800d24519d871749f1c742120aebd14d9d000000209483d90007000000000000006bc1"], 0x1}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10000000000038) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 07:01:41 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff0000ff00, 0xd4, &(0x7f0000000080), 0x4) 07:01:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/153, 0x99}], 0x1, 0x0) 07:01:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "80762a187131b93cc094e7c98dac844739fc7768b163a661"}) 07:01:41 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x4, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) dup2(r0, r1) 07:01:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 07:01:41 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff01000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x5, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') sendfile(r0, r1, 0x0, 0x800000bf) 07:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x6, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffffa4ffffff, 0xd4, &(0x7f0000000080), 0x4) 07:01:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000, 0x6}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:42 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000000, 0x0, 0x0, 0x0, 0x0) 07:01:42 executing program 1: 07:01:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() pread64(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x0) tkill(r1, 0x1000000000013) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x7, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffffff000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:42 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffee6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x8, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffffffffffa4, 0xd4, &(0x7f0000000080), 0x4) 07:01:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x3) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x1, 0x300) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 07:01:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xa, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') lseek(r0, 0xfffffffffffffffd, 0x2) 07:01:42 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x2, &(0x7f0000000080), 0x4) 07:01:42 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xb, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:42 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x0, "1ab1583078be1361479387ee9322109be260f0460ea6630d9b1e7160523d2531"}) 07:01:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500e000000100000000000000000000000000000000000000000000000000000000000000000000ffffac1e0000000000000600"/180], 0x1}}, 0x0) 07:01:42 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x3, &(0x7f0000000080), 0x4) 07:01:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x1}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x7f00, 0x0, 0x0, 0x2000]}, 0x2c) 07:01:43 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xc, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x5412}) 07:01:43 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f0000000100)) 07:01:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000, 0x6}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:43 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x5, &(0x7f0000000080), 0x4) 07:01:43 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xd, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x5412}) 07:01:43 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xf, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:43 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x6, &(0x7f0000000080), 0x4) 07:01:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 07:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:43 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f0000000380)="2f76bda18cf404fbf61b6e55dfba7aa8b2e459842e", 0x15, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) 07:01:43 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x10, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:43 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) membarrier(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) 07:01:43 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x7, &(0x7f0000000080), 0x4) 07:01:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000, 0x6}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:44 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x11, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:44 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x8, &(0x7f0000000080), 0x4) 07:01:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000, 0x6}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:44 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x12, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:44 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xa, &(0x7f0000000080), 0x4) 07:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:44 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x13, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:44 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x91f274) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file1\x00') lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 07:01:44 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xb, &(0x7f0000000080), 0x4) 07:01:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:44 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x14, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000, 0x6}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:44 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xc, &(0x7f0000000080), 0x4) 07:01:44 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x15, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:45 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd, &(0x7f0000000080), 0x4) 07:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:45 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x16, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) getresgid(0x0, 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 07:01:45 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xf, &(0x7f0000000080), 0x4) 07:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:45 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x17, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:45 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x12, &(0x7f0000000080), 0x4) 07:01:45 executing program 1: 07:01:45 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x18, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000380)={0x1ff, 0x0, 0x1000}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 07:01:46 executing program 1: 07:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) 07:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x13, &(0x7f0000000080), 0x4) 07:01:46 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:46 executing program 1: 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x14, &(0x7f0000000080), 0x4) 07:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) 07:01:46 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x21, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x15, &(0x7f0000000080), 0x4) 07:01:46 executing program 2: 07:01:46 executing program 1: 07:01:46 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x22, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x16, &(0x7f0000000080), 0x4) 07:01:46 executing program 1: 07:01:46 executing program 2: 07:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) [ 151.536703][ T8094] attempt to access beyond end of device [ 151.547150][ T8094] loop5: rw=1048577, want=130, limit=112 07:01:46 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x23, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 151.614466][ T8094] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 151.650375][ T8094] attempt to access beyond end of device 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x17, &(0x7f0000000080), 0x4) 07:01:46 executing program 1: 07:01:46 executing program 2: [ 151.689435][ T8094] loop5: rw=1048577, want=131, limit=112 [ 151.713619][ T8094] Buffer I/O error on dev loop5, logical block 130, lost async page write 07:01:46 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x24, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 151.760438][ T8094] attempt to access beyond end of device [ 151.787356][ T8094] loop5: rw=1048577, want=132, limit=112 07:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:46 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r0, 0x540b, 0x0) 07:01:46 executing program 2: [ 151.835887][ T8094] Buffer I/O error on dev loop5, logical block 131, lost async page write 07:01:46 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x18, &(0x7f0000000080), 0x4) 07:01:46 executing program 1: [ 151.889271][ T8094] attempt to access beyond end of device [ 151.949288][ T8094] loop5: rw=1048577, want=133, limit=112 07:01:47 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x25, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) [ 151.996495][ T8094] Buffer I/O error on dev loop5, logical block 132, lost async page write 07:01:47 executing program 2: [ 152.037033][ T8094] attempt to access beyond end of device [ 152.071779][ T8094] loop5: rw=1048577, want=142, limit=112 07:01:47 executing program 1: 07:01:47 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r0, 0x540b, 0x0) [ 152.096014][ T8094] Buffer I/O error on dev loop5, logical block 141, lost async page write 07:01:47 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x19, &(0x7f0000000080), 0x4) 07:01:47 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0x9}) [ 152.162243][ T8094] attempt to access beyond end of device [ 152.201265][ T8094] loop5: rw=1048577, want=143, limit=112 07:01:47 executing program 1: [ 152.206930][ T8094] Buffer I/O error on dev loop5, logical block 142, lost async page write 07:01:47 executing program 2: 07:01:47 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x26, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:47 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r0, 0x540b, 0x0) [ 152.262764][ T8094] attempt to access beyond end of device [ 152.268419][ T8094] loop5: rw=1048577, want=144, limit=112 07:01:47 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0x9}) 07:01:47 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x21, &(0x7f0000000080), 0x4) [ 152.335581][ T8094] Buffer I/O error on dev loop5, logical block 143, lost async page write 07:01:47 executing program 1: [ 152.407493][ T8094] attempt to access beyond end of device 07:01:47 executing program 2: [ 152.450820][ T8094] loop5: rw=1048577, want=145, limit=112 07:01:47 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x22, &(0x7f0000000080), 0x4) 07:01:47 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0x9}) 07:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) [ 152.491663][ T8094] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 152.513978][ T8094] attempt to access beyond end of device [ 152.519627][ T8094] loop5: rw=1048577, want=2209, limit=112 07:01:47 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x27, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 152.580005][ T8094] attempt to access beyond end of device [ 152.607474][ T8094] loop5: rw=1048577, want=4289, limit=112 07:01:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:47 executing program 1: [ 152.647929][ T8094] attempt to access beyond end of device 07:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:47 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x18, r0, 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x20000000, 0x0, 0xce}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 152.700887][ T8094] loop5: rw=1048577, want=7609, limit=112 07:01:47 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x28, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) [ 152.750176][ T8094] attempt to access beyond end of device [ 152.788380][ T8094] loop5: rw=1048577, want=7705, limit=112 07:01:47 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x31, &(0x7f0000000080), 0x4) [ 152.822490][ T8094] attempt to access beyond end of device 07:01:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x802) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{}], 0x18) 07:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:47 executing program 2: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) writev(r1, &(0x7f0000002540)=[{&(0x7f0000000200)="9d", 0x1}], 0x1) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 152.883760][ T8094] loop5: rw=1048577, want=7734, limit=112 [ 152.889517][ T8094] Buffer I/O error on dev loop5, logical block 7733, lost async page write [ 152.946020][ T8094] attempt to access beyond end of device [ 152.985466][ T8094] loop5: rw=1048577, want=7735, limit=112 07:01:48 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:48 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x32, &(0x7f0000000080), 0x4) 07:01:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) [ 153.016490][ T8094] Buffer I/O error on dev loop5, logical block 7734, lost async page write [ 153.050953][ T8094] attempt to access beyond end of device 07:01:48 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xc8, &(0x7f0000000080), 0x4) [ 153.136856][ T8094] loop5: rw=1048577, want=7736, limit=112 [ 153.166452][ T8094] attempt to access beyond end of device 07:01:48 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2a, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:48 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) [ 153.193731][ T8094] loop5: rw=1048577, want=7737, limit=112 07:01:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) [ 153.249659][ T8094] attempt to access beyond end of device [ 153.282807][ T8094] loop5: rw=1048577, want=7758, limit=112 [ 153.333566][ T8094] attempt to access beyond end of device [ 153.357204][ T8094] loop5: rw=1048577, want=7759, limit=112 [ 153.378191][ T8094] attempt to access beyond end of device [ 153.401788][ T8094] loop5: rw=1048577, want=7760, limit=112 [ 153.419806][ T8094] attempt to access beyond end of device [ 153.445603][ T8094] loop5: rw=1048577, want=7761, limit=112 [ 153.459749][ T8094] attempt to access beyond end of device [ 153.467485][ T8094] loop5: rw=1048577, want=7810, limit=112 [ 153.474727][ T8094] attempt to access beyond end of device [ 153.480502][ T8094] loop5: rw=1048577, want=7811, limit=112 [ 153.492440][ T8094] attempt to access beyond end of device [ 153.498259][ T8094] loop5: rw=1048577, want=7812, limit=112 [ 153.508929][ T8094] attempt to access beyond end of device [ 153.514956][ T8094] loop5: rw=1048577, want=7813, limit=112 [ 153.520693][ T8094] attempt to access beyond end of device [ 153.526808][ T8094] loop5: rw=1048577, want=7822, limit=112 [ 153.532646][ T8094] attempt to access beyond end of device [ 153.538277][ T8094] loop5: rw=1048577, want=7823, limit=112 [ 153.544681][ T8094] attempt to access beyond end of device [ 153.550309][ T8094] loop5: rw=1048577, want=7824, limit=112 [ 153.556141][ T8094] attempt to access beyond end of device [ 153.561829][ T8094] loop5: rw=1048577, want=7825, limit=112 [ 153.569304][ T8094] attempt to access beyond end of device [ 153.574985][ T8094] loop5: rw=1, want=10729, limit=112 07:01:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x802) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{0x0}], 0x1) dup2(r0, r1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) 07:01:49 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xc9, &(0x7f0000000080), 0x4) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2b, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:49 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xca, &(0x7f0000000080), 0x4) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2c, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2d, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:49 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xcb, &(0x7f0000000080), 0x4) 07:01:49 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000280)=0xc) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2e, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:49 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xcc, &(0x7f0000000080), 0x4) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2f, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x30, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 154.528524][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 154.528536][ T26] audit: type=1804 audit(1561014109.535:31): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/46/bus" dev="sda1" ino=16659 res=1 07:01:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) [ 154.687498][ T26] audit: type=1804 audit(1561014109.695:32): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/46/bus" dev="sda1" ino=16659 res=1 07:01:49 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xcd, &(0x7f0000000080), 0x4) 07:01:49 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x31, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 154.806180][ T26] audit: type=1804 audit(1561014109.805:33): pid=9301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/46/bus" dev="sda1" ino=16659 res=1 [ 154.884805][ T26] audit: type=1804 audit(1561014109.885:34): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/46/bus" dev="sda1" ino=16659 res=1 07:01:49 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000280)=0xc) 07:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) [ 155.065981][ T26] audit: type=1804 audit(1561014110.075:35): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/47/bus" dev="sda1" ino=16677 res=1 07:01:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) 07:01:50 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xcf, &(0x7f0000000080), 0x4) 07:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:50 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x32, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 155.292039][ T26] audit: type=1804 audit(1561014110.295:36): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/47/bus" dev="sda1" ino=16677 res=1 07:01:50 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000280)=0xc) 07:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x9}) [ 155.482738][ T26] audit: type=1804 audit(1561014110.495:37): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/48/bus" dev="sda1" ino=16650 res=1 [ 155.608709][ T26] audit: type=1804 audit(1561014110.615:38): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/48/bus" dev="sda1" ino=16650 res=1 07:01:50 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd0, &(0x7f0000000080), 0x4) 07:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:50 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:50 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd1, &(0x7f0000000080), 0x4) 07:01:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) 07:01:51 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:51 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000280)=0xc) 07:01:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:51 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd2, &(0x7f0000000080), 0x4) 07:01:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) 07:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:51 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:51 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd3, &(0x7f0000000080), 0x4) [ 156.538197][ T26] audit: type=1804 audit(1561014111.545:39): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/49/bus" dev="sda1" ino=16679 res=1 07:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:51 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x9}) [ 156.679154][ T26] audit: type=1804 audit(1561014111.685:40): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/49/bus" dev="sda1" ino=16679 res=1 07:01:51 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 07:01:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:51 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xff00, 0x4) 07:01:51 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:52 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0x1000000, 0x4) 07:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x540b, 0x0) 07:01:52 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 07:01:52 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:52 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') pkey_alloc(0x0, 0x0) 07:01:52 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:52 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xa4ffffff, 0x4) 07:01:52 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:52 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 07:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:52 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) renameat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000480)='./bus\x00') 07:01:52 executing program 2: r0 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:52 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xff000000, 0x4) 07:01:52 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:52 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 07:01:52 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:52 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:52 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xffffffa4, 0x4) 07:01:53 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 07:01:53 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:53 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0x100000000000000, 0x4) 07:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETSF(0xffffffffffffffff, 0x540b, 0x0) 07:01:53 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() 07:01:53 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:53 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:53 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xa4ffffff00000000, 0x4) 07:01:53 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 07:01:53 executing program 5: seccomp(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) membarrier(0x0, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000300)=ANY=[], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89bf, 0x0) 07:01:53 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:53 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xff00000000000000, 0x4) 07:01:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 07:01:54 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() 07:01:54 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:54 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0xffffffff00000000, 0x4) 07:01:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:54 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:54 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0xfffffffffffffff9, 0x7}) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 159.312446][ T9616] FAT-fs (loop3): bogus number of reserved sectors [ 159.343438][ T9616] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth1_to_bridge\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0xa8, 0x2, 0x8000, "9c711be1bb1cc14115ad888f445a0c90", "b8cdd293eeb7bede8fd34b489a3cb21c024ed4b4f957498f218d7ea5da9c8ad86ec5e26b3d2c0c27755c6625823c4437b0214ee6b819952215167c68710937451ab0b15be2e498b7288ab093553d2a7b67ace47bb11738b71cc12c36b5f3d3c61bfd991d6e22ef126055ff49143506c127fcd6d50b26562f0ca23701519060b69a1a3ec5d297b1d84ad932547ec76fe9e43426"}, 0xa8, 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0xc171}, 0x28, 0x2) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup(r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000400)={0x2, 0x3ff, 0x7fff, 0x8, 0x1000}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r5 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280)) ftruncate(r5, 0x80080) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:01:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:54 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:54 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:55 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) getpid() 07:01:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:55 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:55 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, [], 0x10}, @in=@loopback, 0x4e20, 0x292, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x3b, r1, r2}, {0x101, 0x3, 0xc7, 0x6, 0x23f000000000, 0x1, 0x6, 0x1}, {0x400, 0xffffffffffff1dd1, 0x7, 0x6}, 0x80000000, 0xdd, 0x0, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0x4d4, 0x2b}, 0xa, @in=@local, 0x3500, 0x5, 0x3, 0x10000, 0x4c, 0x1, 0x5}}, 0xe8) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) [ 160.156687][ T9637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.167201][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 160.167211][ T26] audit: type=1804 audit(1561014115.165:53): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/56/bus" dev="sda1" ino=16689 res=1 [ 160.239566][ T9641] FAT-fs (loop3): bogus number of reserved sectors [ 160.315164][ T9641] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:55 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5e4651fafc800"/662], 0x290) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20014000) 07:01:55 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:56 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth1_to_bridge\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0xa8, 0x2, 0x8000, "9c711be1bb1cc14115ad888f445a0c90", "b8cdd293eeb7bede8fd34b489a3cb21c024ed4b4f957498f218d7ea5da9c8ad86ec5e26b3d2c0c27755c6625823c4437b0214ee6b819952215167c68710937451ab0b15be2e498b7288ab093553d2a7b67ace47bb11738b71cc12c36b5f3d3c61bfd991d6e22ef126055ff49143506c127fcd6d50b26562f0ca23701519060b69a1a3ec5d297b1d84ad932547ec76fe9e43426"}, 0xa8, 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0xc171}, 0x28, 0x2) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup(r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000400)={0x2, 0x3ff, 0x7fff, 0x8, 0x1000}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r5 = open(&(0x7f0000000100)='./file0\x00', 0x20141042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280)) ftruncate(r5, 0x80080) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 07:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:56 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) io_setup(0x0, 0x0) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:56 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 161.137850][ T9672] FAT-fs (loop3): bogus number of reserved sectors [ 161.169281][ T9672] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:56 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 161.250973][ T26] audit: type=1804 audit(1561014116.255:54): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/57/bus" dev="sda1" ino=16702 res=1 [ 161.398320][ T26] audit: type=1804 audit(1561014116.405:55): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/57/bus" dev="sda1" ino=16702 res=1 07:01:56 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:56 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:56 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x800000000000000, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={[], 0x1}, 0x6, 'veth1_to_hsr\x00'}) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "6fca936b3d3fca24174ea7dcab4bb01bc8532897"}, 0x15, 0x3) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000800)={0x0, 0xddde, 0x5, [0x9, 0x6, 0x1, 0x6, 0x3]}, &(0x7f0000000840)=0x12) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000880)={0x0, 0x7, 0x5}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001d40)={0x0, 0x2, 0x30}, &(0x7f0000001d80)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000024c0)={0x0, 0xf84}, &(0x7f0000002500)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0xec80000000000000, @remote, 0x54007d51}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000200)="d918c00174cea86a690b0695e683ef41a5fd76ebbbd263a16e39ba313270e8052608eb4061919b8e0ea1650b5dfd24d23675c0055124648c8386b1030d7ab7c11b1781979359b76c42418dd8d25df1efe4fa863ebf44df7b16ff12fc97e32de3d36973f50581cc58f0384f", 0x6b}, {&(0x7f0000000280)="3bc38af71cef5f1f7b53c5c3ef01edf389b89245f5ec1e5c7340e880c2662c9f51ad6568aad98e823a", 0x29}, {&(0x7f00000002c0)="4ff22e424c68f7642b9708845274219907b2d8879e98d8b7d707475193f1f070db4ce346880433902becb991023a03960af91c9b2464e7fbe54d927c7a96b2bdf09e72a777a5ef634f9d02893afcc8e4cd3d47c618ff56b24edd5223091b14d6afbb66f57d275f7c6b45309bf81a0e1acfd9214ed63e38ff01c48e2960ed2038fbd52fc83adf536f5b15c742349aeb6cc388072abffa39d7e988839f67aa425225add63a741b5af8", 0xa8}, {&(0x7f0000000380)="10248c448522b3451c8bd096ef7d7d888fa0f5c86873526712d5ec6693138bc9151e1b30f00407f548cdcd72aabb56c4241405581ffd3685e75680d829c97b0e81494400f02d86cbed34e68ffe17c06e51e281fd8f969a78347dbcccd798104e1bb88e9ef20d6ea2f6c09d9f80a802aa23e70264438e83f4d943deae3e6c1b3800d5d6e5d2254a8fb07c1f5cbed6888309cc710a1f03fd8b1c7371454a35c53c5bcd8452e1b1713f288e1348d054340b3516a9c65b4f0b7c11ea304efe8ffa29023ed26f", 0xc4}, {&(0x7f0000000480)="577a07bf60c920a1d22c19657819639b154a621ce17adafc31ae816b1306bf269821f6c5e06211785f9a88ef633cf7c4e2cbc645ccf4fb8808afe59294b7d2f3ba3bbef366890a00399d3f5e4c1a210c88768865e856f1f14b31f90a01cefe5ad657537beadd7ecf5e2cb78c55eb213777de4ef3d55eea1ce75fb223a7bd2a5b34a9ba8cf5982f1aa0720dcdcab1f33a0083ae50fd1195aa1a26be24c38a6769f8692362b7531657542d96cf8db0efa452d0da93071376ae83767bd83ab4df06ac2f9dced6ca2dcb3ab3549b9ad4d3133e19680e6551abf4e5f64ab5f1cc862f9ddcc9d8daf023c3487643dc2ca2", 0xee}, {&(0x7f0000000580)="8b91867873675db95da93743ce0e27921ba9c3e82606d64bbcf42f424b8a5135e07f3b4f8cb6d932d5661cfb83137f3739ae4a18c6c86c79ab44332904a431cd10c6e5292fff14019a9650d3307a3f8afacb1df81ad14dab12cbfa69447339e838621e70d2ce3b9c32b74d791cf4435a5fb5c064ea1a7f1bac1e1942fca42d231037a7ea45f3461292c6a2f81873296136d988cbbfe76ebb4f09f576cc6b0195a8c51484c1ebf32ac4ff5152ed6538568c5344", 0xb3}], 0x6, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}], 0x30, 0x8854}, {&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @empty, 0x100}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000740)="9f0073fff80c7d111945c77847448766fe631b9996af730071df0104e2cf3a1176d67429300621761280a15f0e7ad2510201d6f9570154413ed72193da0268951901b1ffdbf9251439e2ff46703cff819e9baaaaf3944d8c04c8", 0x5a}], 0x1, &(0x7f0000000900)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0xff, 0x2, 0x2790, 0x3, 0x10, 0xfed, 0x8f, r2}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @init={0x18, 0x84, 0x0, {0x9, 0xaef, 0x9, 0xffffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @multicast2}}, @authinfo={0x18, 0x84, 0x6, {0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8, 0x9, 0x2, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="7f015b23afc3fd09a2282c4004eb3bd2"}], 0xf0, 0x24004005}, {&(0x7f0000000a00)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x10000, 0xc821, 0xfffffffffffffff8, 0x3ff}}, @authinfo={0x18, 0x84, 0x6, {0x100000000}}, @authinfo={0x18, 0x84, 0x6, {0xffff}}], 0x80, 0x40811}, {&(0x7f0000000ac0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000b00)="5d60b744192686c22867ab322b464e9e69a676cdd292b37b5cef423c07955d04ac60", 0x22}, {&(0x7f0000000b40)="4137c533f04d16ff00480910bfed77ec565a592f6750bf4574c04e13f302ea9c4be22081a95e9e710cff6cca5e5747b89c6860b7534e65a05626b4b188876e4d0819fab8b4c45e7633855abbadd0d2c6f8b7260b2b669cc4df3293979aa0a37a32f0fc2328c8d4bc1266fa1ae4abaeaba4af6bb858e777f3037898c062e75c8a7873af7c6d2dbe12731cc9a537c7e93e90254aa3cc84e4fe46f3adb8a19206cf70d2adbfc700e1149d6e696b6d01e97f49f409757c473363cbe23ebf60c1a874f9bfa3c1923915fb32f8e429f0d580", 0xcf}, {&(0x7f0000000c40)="4b60919e981ce9bef8305cbfc701c9597ebc4ba50c523967826035824a1e1b8e1cdc2a18ab0e256c63d84ca5bd3e0f92341af79aed309be2e90874a7260ae41cada98e4d7125b57ead1459d731d59878965180dc7bd962fbd54963dde625d42215eb34995661599d720e3114ee771f79206a4610cbfcdb950d00df259fa06d093c3708ce9b76802f43ad9c4952fca6e9947c0053e241", 0x96}, {&(0x7f0000000d00)="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", 0x1000}], 0x4, &(0x7f0000001dc0)=[@sndinfo={0x20, 0x84, 0x2, {0xf2f8, 0x8, 0xe, 0x9, r4}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x800}, {&(0x7f0000001e00)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002400)=[{&(0x7f0000001e40)="e96cf3ce4b843b1af4397b04df67e72dbd7e519a5f68a4fa677f2f9c2eacc6c702cd9418b62358f19949c5cfda04f92a4cab3ead0d3a3075d8c3f2c1c8b6f692656d815475ab4b011d16c1dc72da02b34398f8a80b84bfccee7a091d2318a3b0dca541998f432695a79f33fe8d78548df01adc6be0ff74f56900cf7dd0f6fcf8ada84f11d62f9b27025e0cc8870dda748fcad8ed699c90ad65d8fa1633c84e7d3eb994e64b917e9680d9", 0xaa}, {&(0x7f0000001f00)="dc52c182dc3d1254c9ce3dbb00cdff56770f4b9f1a", 0x15}, {&(0x7f0000001f40)="536badf4e737ca5044a528c3fd392ad6c3b19fb6e9e9735f963ad89810522d39e091eb", 0x23}, {&(0x7f0000001f80)="bf71939e21db4c95f66daf22f8ec60e9a87eb25bdf39f209eb68a12523433e2c74d78ea6a8cfbd9ab7d6e75a1839f5274a0c47ac5f15a59fc452fd6baab094652642bfd505006d8c8371060df1725e5409b3b28301b0aeb8b9cf280b97d77579ba2c3f01e7643b5f9820ac89c9e6875958a69aa8d56271b6d9cb61cd4cb88c03ca28615230563e40c89972297c8aa73f8b4981c042627d1ea430f4ef7109c6d61ab5babec11e4697da518d7554cc8262afbef36a7e0d72aebc85600cc33e2a7b0d96015c2306f54b22fd910e7c7dbdde39917605423393adfc1990d82aa36567393b04", 0xe3}, {&(0x7f0000002080)="f7949e34a893e85c82c4662fb10dae430aaec2b12aa9aa635686688f36669a2a8e5ce3178687937680b944b3f2271c121a5b674187fd6d587f7e5bc8e6eb64ab54417fbce6d39c40ceb33e355a8b49eb4ebfc5d76d0f67926ffa3ac6ebe877cb02aff1a8d49230244aaccfef70084417338b39f809e97a3cd2dbc03a87754aea052cb78a5a4bfd778608addf22eaea54570aab1c5bc77e03618c39bf8dc76554b30b16416f5c35cbe8293177ef2854fdeb56f7ebf264c3c55076199043ac0ceea02a2cde6069c734fb889fd1ac4d24", 0xcf}, {&(0x7f0000002180)="0c859c8e936a8e5ed489c0a7ae16051bb940442dfb3d48489f2639b139c8488eda662327b51cb0bc6cb2e503f65c0fff8dfb8d85422a73e3372f37fc70f61e096bcdd0d09646684b4b740a269c791bf7185f42d70f835d6dba31deb3a454be74a875961c076c5d41ce2006b3a9f9502cb03110c5b96e257fd5d3d8318b7fcc7a65d22893c88378990382db824f4625799589890dc6507ce25ad0", 0x9a}, {&(0x7f0000002240)="881e30e8d13ac0ee09080a1d628d91e391ad2af8e91a02d5db257a5a729666ae3df3f19558b07e8f3ca4fadf3c85cab9a8ee0fe092767400732aac98816becdd0af4785d13ad1a0cca310e6bf14cf429c1896ec8fdf8e3d7221a5a2acc14455cbba65afa55eaf8413dadb6b4ded294b15f8e37bab90f66751bc4e6046f329609", 0x80}, {&(0x7f00000022c0)}, {&(0x7f0000002300)="90e6884112700178690877091027", 0xe}, {&(0x7f0000002340)="b15c5b3c06ed722765747bb42f81eaff8e08018d98f1eef91ab68df95af842249c18a917093ede89340e27d87c786c051539ff6a03bc8d02ba999fe1713a831299c54b97d2442648e63ca64c4640093a691ed55ebbd995260082136aaf0e6510f04a47dfc9b58f89c559f4e72bbf3233701dd7e47290369bed0ee502476f58cd366ec24cbd1089aaa4feed146c80e7885a55598142405dfa11027e73ae7c2c", 0x9f}], 0xa, &(0x7f0000002540)=[@authinfo={0x18, 0x84, 0x6, {0x3f}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @authinfo={0x18, 0x84, 0x6, {0x8000}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x20, 0x80000000, r5}}, @init={0x18, 0x84, 0x0, {0x20, 0x5, 0x6, 0x6c0ab02f}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xa0, 0x40}, {&(0x7f0000002600)=@in6={0xa, 0x4e21, 0x9, @empty, 0xf9}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000002640)="15069fa79290eab2338a90a15f453f1228ba519a7ef786d68f2b767ea1cae58d9f3929e118c1a667435e829f913c6dc6cb03287a489462382f4981b749b8481da4f63c3447d3c54b65dc010c8ef3d5061d1f8b7e3780defc5758969253d4db2b02e1510c476d9642b7cd8a92155144dbefac828d77de8b603993af906dc3c4", 0x7f}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="42217eab08dd4e22fe2984f2a0be4cda04bddad267a5136072d0dae0b28646af45556cf1a7c1ebc447b646557cce0579a1f4ebc33c42a2d6e9201e5a1cdeb632dc55bf96c55a7ec18664ded512f4195524b5710d57bf1f49dfbbc79dc63b16e5f4f3023a2a6b0af419309b0fd43d342d6cb2", 0x72}], 0x3, 0x0, 0x0, 0x20048000}], 0x6, 0x4010) 07:01:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) [ 161.665650][ T9702] FAT-fs (loop3): bogus number of reserved sectors [ 161.678830][ T26] audit: type=1804 audit(1561014116.685:56): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/58/bus" dev="sda1" ino=16711 res=1 [ 161.762089][ T9702] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:56 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) 07:01:56 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:56 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="3d58f2eccfe03411eef2fbf70c94f5706ae2bae7d3ec731a3430c2be70d3095fb517029389571b56e3a3b317d63dfae3cff23aa35bec85bba772f43067c67567a6e75094943fa135370840a7e38cb51c761a3cb840f98b8ac06517748dc16c58580d36e84e3b6d16a0041c9664988691c78babca98785269a9ce225359d70850d0") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 07:01:57 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) [ 161.950059][ T26] audit: type=1804 audit(1561014116.905:57): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/58/bus" dev="sda1" ino=16711 res=1 07:01:57 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:57 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0x37, &(0x7f0000000040)=0x40, 0x4) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x7fff, 0x5}, {0xffff, 0x8811}, {0x2, 0x401}, {0x101, 0x3ff}]}) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2fb1, 0x40100) 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 162.164260][ T26] audit: type=1804 audit(1561014117.175:58): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/59/bus" dev="sda1" ino=16716 res=1 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:57 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x95, "77652d85e3213e7e5e673f4c0be8d2ac366ac99e8e043ceb26e922d1d461f05e3925aa113c5f2518cd6ae17771d132b537aa7e26c1d419b66df5b924e38e60aa4d35802d8a974961c78020a2389b95fc3e6175cc76e6df700a1d31f63dacdce451ef6ba327d8d92d14cee17f7e80f37ba2e45a6ed992d7a2abccf6237b475143dee436dd4c78dee4c9251d1aca7091ce8a17d152c7"}, &(0x7f0000000000)=0xb9) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0xeae, 0x200, 0x8, 0x0, 0x0, [{r0, 0x0, 0x9}, {r0, 0x0, 0x3}, {r0, 0x0, 0x3e96}, {r0, 0x0, 0x100}, {r0, 0x0, 0xe316}, {r0, 0x0, 0x2}, {r0, 0x0, 0xcac6}, {r1, 0x0, 0x7f}]}) [ 162.269800][ T9745] FAT-fs (loop3): bogus number of reserved sectors [ 162.294802][ T9745] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) [ 162.372050][ T26] audit: type=1804 audit(1561014117.375:59): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/59/bus" dev="sda1" ino=16716 res=1 07:01:57 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:57 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) [ 162.539803][ T26] audit: type=1804 audit(1561014117.545:60): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/60/bus" dev="sda1" ino=16711 res=1 07:01:57 executing program 5: 07:01:57 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080)=0x7fff, 0x4) 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:57 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) [ 162.645892][ T26] audit: type=1804 audit(1561014117.645:61): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/60/bus" dev="sda1" ino=16711 res=1 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:57 executing program 5: 07:01:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) [ 162.771443][ T9768] FAT-fs (loop3): bogus number of reserved sectors [ 162.812530][ T26] audit: type=1804 audit(1561014117.825:62): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/61/bus" dev="sda1" ino=16702 res=1 [ 162.814079][ T9768] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:57 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r0, 0x80000) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x7, {{0xa, 0x4e24, 0x18, @dev={0xfe, 0x80, [], 0x24}, 0xffffffff80000001}}, 0x1, 0x4, [{{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}}, {{0xa, 0x4e20, 0x11, @dev={0xfe, 0x80, [], 0x10}, 0x7f}}, {{0xa, 0x4e22, 0x61b3, @mcast1, 0x5}}, {{0xa, 0x4e20, 0x299, @local, 0x38000000}}]}, 0x290) 07:01:57 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 5: 07:01:58 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) 07:01:58 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:58 executing program 5: 07:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 07:01:58 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0xf8, 0x0, 0x308, 0x308, 0x220, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @empty, @broadcast, @gre_key=0xdb38, @port=0x4e20}}}}, {{@ip={@empty, @empty, 0xffffff00, 0xff000000, 'syzkaller0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x29, 0x2, 0x8}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xe1ba7c5, [0x4, 0x7, 0x6, 0x101, 0x2, 0x3], 0xff, 0x9}}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0x1f, 0x8, 0x554e}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x20}}}, {{@ip={@rand_addr=0x100, @multicast2, 0xff000000, 0xffffffff, 'bcsf0\x00', 'gre0\x00', {0xcdd0c2a27ab7d11f}, {0xff}, 0x0, 0x1, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x3, 0x3ff, 0x9, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x40, 0x187d}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x9, @loopback, @broadcast, @port=0x4e21, @port=0x8b}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 07:01:58 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) [ 163.229163][ T9811] FAT-fs (loop3): bogus number of reserved sectors 07:01:58 executing program 5: [ 163.276234][ T9811] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 07:01:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:58 executing program 5: 07:01:58 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:58 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) 07:01:58 executing program 5: [ 163.491304][ T9835] FAT-fs (loop3): bogus number of reserved sectors 07:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) [ 163.551901][ T9835] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:58 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:58 executing program 5: 07:01:58 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:01:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:58 executing program 5: 07:01:58 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:58 executing program 5: 07:01:58 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:59 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0x9, 0x3, 0x1400, 0xff, 0x10001, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x3cd, 0x1, 0x3, 0x9, 0xfffffffffffffffa}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180), 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x3}}, 0x1ff, 0x12a000, 0x7, 0xfffffffffffffbff, 0x10001}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0x4}, 0x8) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000001300)={0x6, "27ea32d2d957da98c54dff0cbed60062c83bcf713601b374dec2f88c217ccefb", 0x3, 0x10, 0x1000, 0x2, 0xc, 0x1, 0x7, 0x7fff}) socket$inet(0x2, 0x3, 0x2) ioctl$KVM_SMI(r0, 0xaeb7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x108, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x240080c0) sendto$netrom(r0, &(0x7f0000001380)="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", 0x1003, 0x44, &(0x7f00000023c0)={{0x3, @default, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x48) setsockopt$inet_int(r0, 0xffffffff00000000, 0x40000000000000d4, &(0x7f0000000180), 0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) 07:01:59 executing program 5: 07:01:59 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 163.972777][ T9877] FAT-fs (loop3): bogus number of reserved sectors [ 164.001936][ T9877] FAT-fs (loop3): Can't find a valid FAT filesystem 07:01:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:59 executing program 5: 07:01:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:01:59 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:01:59 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:59 executing program 5: 07:01:59 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:59 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x80000001}, &(0x7f0000000180)=0x3e2) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x400, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x2, {r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x7, 0x7, 0x7fffffff, 0x3}}, &(0x7f0000000280)=0xb0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0xa99, 0x4) 07:01:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) 07:01:59 executing program 5: 07:01:59 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:01:59 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:00 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:00 executing program 5: 07:02:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:00 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:00 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:00 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xffffffff, @local, 0x6}], 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) [ 165.385156][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 165.385165][ T26] audit: type=1804 audit(1561014120.395:70): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/68/bus" dev="sda1" ino=16735 res=1 07:02:00 executing program 2: 07:02:00 executing program 5: 07:02:00 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0xf8) [ 165.703813][ T26] audit: type=1804 audit(1561014120.495:71): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/68/bus" dev="sda1" ino=16735 res=1 07:02:00 executing program 2: 07:02:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0xff49) 07:02:00 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:01 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) 07:02:01 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x6, 0x20, 0xfff, 0x3, 0x1f, 0x80}, 0xc3, 0x0, 0x9, 0x37e, 0x3, "3c4b89be9b5264b8f156ba6624d2b74931fe2087a34185f79d7d0f49673311f41864ea0dff1514f4379d995aa131f7b1b6e83b916337e2b8c23176e1212de343cb3cecc658b60984adcdea52318a2b4531f1da002f1c4ac7f235faa43f207b6d38ba598eb89f2b9013fbe9efea484504155438b3c18267dc0bca309a46d46545"}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'nlmon0\x00', 0xfffffffffffffff7}, 0x18) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:02:01 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 166.299343][ T26] audit: type=1804 audit(1561014121.305:72): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/69/bus" dev="sda1" ino=16748 res=1 07:02:01 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:01 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) chmod(&(0x7f0000000000)='./file0\x00', 0x50) 07:02:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = inotify_init() getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) 07:02:01 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$netlink(0x10, 0x3, 0x0) [ 166.435763][ T26] audit: type=1804 audit(1561014121.445:73): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/69/bus" dev="sda1" ino=16748 res=1 07:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:01 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f0000000080)) 07:02:01 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:02 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x7, 0x1000) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) r7 = getuid() fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000900)=[0xee00, 0x0, 0xee01]) fstat(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() fstat(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010003000000000002000500", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="040003000000000008000100", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r17, @ANYBLOB="14000600009a755f4eacfce363000000"], 0xa4, 0x2) 07:02:02 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:02 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:02 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) [ 167.195259][ T26] audit: type=1804 audit(1561014122.205:74): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/70/bus" dev="sda1" ino=16753 res=1 07:02:02 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x7, 0xffffffffffffffcc) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e23, @rand_addr=0xab}], 0x50) 07:02:02 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) [ 167.304261][ T26] audit: type=1804 audit(1561014122.205:75): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/70/bus" dev="sda1" ino=16753 res=1 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 167.332617][ T26] audit: type=1804 audit(1561014122.275:76): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/71/bus" dev="sda1" ino=16740 res=1 [ 167.358563][ T26] audit: type=1804 audit(1561014122.285:77): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir639416390/syzkaller.6JjHP8/71/bus" dev="sda1" ino=16740 res=1 07:02:02 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) [ 167.398980][ T26] audit: type=1804 audit(1561014122.405:78): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir917727791/syzkaller.FgeWZg/87/bus" dev="sda1" ino=16562 res=1 [ 167.422833][ T26] audit: type=1804 audit(1561014122.405:79): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir917727791/syzkaller.FgeWZg/87/bus" dev="sda1" ino=16562 res=1 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:02 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000021c0)=""/4096) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @empty}, {0x6, @local}, 0x30, {0x2, 0x4e22, @empty}, 'hwsim0\x00'}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x2], 0x2) r2 = getpgid(0x0) capset(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000200)={0x2d, 0x8, 0x7, 0x1000, 0x1c27cfc8, 0xf51b}) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x9, 0x400) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xfffffffffffffffb, 0x0) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) write$P9_RREAD(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="5a0000e1b0c56b8063e145959fe532100d7edc9ea38a76311c6de68528e742f4a78aee8e76e64ba857b2504a2c6ac9cee935a6e5fc278000003fecfb4febe1de0ce33fe20f78ef1697f1648be7673c3f00"/90], 0x5a) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x7, 0x4) 07:02:02 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:02 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@umask={'umask'}}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:02 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:03 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:03 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 0: fsopen(&(0x7f0000000000)='configfs\x00', 0x1) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x67d6}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={r1, 0xbf, 0xffffffff, 0x40, 0xd7de, 0x3}, &(0x7f0000000800)=0x14) r2 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x40, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/205) setsockopt$inet_int(r3, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) 07:02:03 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:03 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x12, 0x9) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x10000, 0x6, 0x400, 0xe49}, 0x6) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000080), 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x200004e22, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x624d, &(0x7f0000000140)='yam0\x00', 0x7fff, 0xfffffffffffffff7, 0x80}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) 07:02:03 executing program 5: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:03 executing program 2: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) r2 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") 07:02:03 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) 07:02:03 executing program 1: sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) fchmodat(r0, 0x0, 0x40) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000540)='./bus\x00', 0x0) 07:02:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x3, 0x2) 07:02:03 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0}, 0x2be) [ 168.555152][T10148] FAT-fs (loop3): bogus number of reserved sectors [ 273.641084][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.648103][ C1] (detected by 1, t=10502 jiffies, g=12493, q=372) [ 273.654695][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294964532-4294954030), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 273.668052][ C1] syz-executor.1 R running task 23424 10158 8039 0x00004000 [ 273.675963][ C1] Call Trace: [ 273.679240][ C1] [ 273.682192][ C1] sched_show_task+0x3bd/0x490 [ 273.686971][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0xf0/0xf0 [ 273.693883][ C1] ? find_next_bit+0x10c/0x120 [ 273.698675][ C1] ? check_preemption_disabled+0x47/0x280 [ 273.704438][ C1] rcu_sched_clock_irq+0x1607/0x1740 [ 273.709764][ C1] update_process_times+0x134/0x190 [ 273.714998][ C1] tick_sched_timer+0x257/0x410 [ 273.719852][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 273.725397][ C1] __hrtimer_run_queues+0x471/0x8b0 [ 273.730612][ C1] ? hrtimer_interrupt+0xda0/0xda0 [ 273.735766][ C1] ? ktime_get_update_offsets_now+0x234/0x250 [ 273.741842][ C1] hrtimer_interrupt+0x38c/0xda0 [ 273.746836][ C1] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 273.752641][ C1] smp_apic_timer_interrupt+0xee/0x260 [ 273.758122][ C1] apic_timer_interrupt+0xf/0x20 [ 273.763059][ C1] [ 273.766015][ C1] RIP: 0010:memset_erms+0xb/0x10 [ 273.770959][ C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 273.790664][ C1] RSP: 0018:ffff888090b9f4e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 273.799101][ C1] RAX: dffffc0000000000 RBX: ffff8880922cb37f RCX: 0000000000000000 [ 273.807177][ C1] RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffffed1012459670 [ 273.815161][ C1] RBP: ffff888090b9f748 R08: ffff88805612a8c0 R09: ffffed1012459650 [ 273.823148][ C1] R10: 1ffff1100ac2551d R11: 0000000000000000 R12: ffffed1012459670 [ 273.831131][ C1] R13: 0000000000000100 R14: ffff8880922cb380 R15: ffff8880922cb37f [ 273.839196][ C1] ? __kasan_kmalloc+0xa2/0x1b0 [ 273.844134][ C1] ? __bfs+0x550/0x550 [ 273.848256][ C1] ? trace_hardirqs_on_caller+0x74/0x80 [ 273.854338][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.859856][ C1] ? setup_fault_attr+0x2b0/0x2b0 [ 273.864941][ C1] ? kmalloc_array+0x32/0x60 [ 273.869545][ C1] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 273.874834][ C1] ? __kmalloc+0x1be/0x310 [ 273.879258][ C1] kasan_slab_alloc+0xf/0x20 [ 273.883851][ C1] __kmalloc+0x213/0x310 [ 273.888107][ C1] ? kmalloc_array+0x32/0x60 [ 273.892706][ C1] kmalloc_array+0x32/0x60 [ 273.897135][ C1] iter_file_splice_write+0x220/0xf40 [ 273.902576][ C1] ? atime_needs_update+0x2d9/0x570 [ 273.907787][ C1] ? touch_atime+0x136/0x270 [ 273.912383][ C1] ? current_time+0x230/0x230 [ 273.917071][ C1] ? splice_from_pipe+0x200/0x200 [ 273.922121][ C1] ? splice_shrink_spd+0xb0/0xb0 [ 273.927072][ C1] ? splice_from_pipe+0x200/0x200 [ 273.932119][ C1] direct_splice_actor+0xf7/0x130 [ 273.937152][ C1] splice_direct_to_actor+0x4c6/0xb40 [ 273.942532][ C1] ? retint_kernel+0x2b/0x2b [ 273.947149][ C1] ? do_splice_direct+0x3d0/0x3d0 [ 273.952178][ C1] ? pipe_to_sendpage+0x310/0x310 [ 273.957257][ C1] ? rw_verify_area+0x1c2/0x360 [ 273.962119][ C1] ? rcu_lock_release+0x26/0x30 [ 273.966971][ C1] do_splice_direct+0x279/0x3d0 [ 273.971833][ C1] ? splice_direct_to_actor+0xb40/0xb40 [ 273.977387][ C1] ? rcu_read_lock_sched_held+0xc0/0x1c0 [ 273.983022][ C1] ? rcu_sync_lockdep_assert+0x5e/0xa0 [ 273.988515][ C1] ? __sb_start_write+0x199/0x360 [ 273.993591][ C1] ? security_file_permission+0x148/0x350 [ 273.999317][ C1] do_sendfile+0x8a3/0x1110 [ 274.003848][ C1] ? __might_fault+0xf9/0x160 [ 274.008543][ C1] ? compat_writev+0x3b0/0x3b0 [ 274.013305][ C1] ? put_timespec64+0x106/0x150 [ 274.018154][ C1] ? ktime_get_raw+0xf0/0xf0 [ 274.022743][ C1] ? get_timespec64+0x250/0x250 [ 274.027599][ C1] __x64_sys_sendfile64+0x1bc/0x220 [ 274.032798][ C1] ? prepare_exit_to_usermode+0x1e1/0x4f0 [ 274.038516][ C1] ? __ia32_sys_sendfile+0xb0/0xb0 [ 274.043625][ C1] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 274.049343][ C1] ? do_syscall_64+0x1d/0x140 [ 274.054021][ C1] do_syscall_64+0xfe/0x140 [ 274.058528][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.064420][ C1] RIP: 0033:0x4592c9 [ 274.068319][ C1] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.087920][ C1] RSP: 002b:00007f2a51bc1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.096339][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004592c9 [ 274.104309][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 274.112278][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 274.120245][ C1] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f2a51bc26d4 [ 274.128215][ C1] R13: 00000000004c689d R14: 00000000004db828 R15: 00000000ffffffff [ 274.136207][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g12493 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 274.147386][ C1] rcu: RCU grace-period kthread stack dump: [ 274.153292][ C1] rcu_preempt R running task 26176 10 2 0x80004000 [ 274.161212][ C1] Call Trace: [ 274.164503][ C1] __schedule+0x658/0x9e0 [ 274.168836][ C1] ? is_mmconf_reserved+0x410/0x410 [ 274.174033][ C1] ? debug_object_init+0x20/0x20 [ 274.178973][ C1] schedule+0x131/0x1d0 [ 274.183130][ C1] schedule_timeout+0x19d/0x2b0 [ 274.187977][ C1] ? console_conditional_schedule+0x40/0x40 [ 274.193876][ C1] ? run_local_timers+0x120/0x120 [ 274.198948][ C1] ? prepare_to_swait_exclusive+0x2a0/0x2a0 [ 274.204854][ C1] rcu_gp_kthread+0xfd8/0x1880 [ 274.209616][ C1] ? kasan_check_write+0x14/0x20 [ 274.214559][ C1] ? rcu_report_qs_rsp+0x150/0x150 [ 274.219675][ C1] ? _raw_spin_unlock_irqrestore+0x77/0xe0 [ 274.225489][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0xe0 [ 274.231292][ C1] ? __kthread_parkme+0xfb/0x150 [ 274.236230][ C1] kthread+0x325/0x350 [ 274.240295][ C1] ? rcu_report_qs_rsp+0x150/0x150 [ 274.245408][ C1] ? kthread_blkcg+0xe0/0xe0 [ 274.249996][ C1] ret_from_fork+0x24/0x30