[ 40.135341][ T26] audit: type=1800 audit(1569061404.917:26): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.175424][ T26] audit: type=1800 audit(1569061404.917:27): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.195767][ T26] audit: type=1800 audit(1569061404.917:28): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.895878][ T26] audit: type=1800 audit(1569061405.727:29): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. 2019/09/21 10:23:36 fuzzer started 2019/09/21 10:23:37 dialing manager at 10.128.0.26:33153 2019/09/21 10:23:37 syscalls: 2493 2019/09/21 10:23:37 code coverage: enabled 2019/09/21 10:23:37 comparison tracing: enabled 2019/09/21 10:23:37 extra coverage: extra coverage is not supported by the kernel 2019/09/21 10:23:37 setuid sandbox: enabled 2019/09/21 10:23:37 namespace sandbox: enabled 2019/09/21 10:23:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/21 10:23:37 fault injection: enabled 2019/09/21 10:23:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/21 10:23:37 net packet injection: enabled 2019/09/21 10:23:37 net device setup: enabled 10:24:46 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x140000) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000000)=""/5, 0x5) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@rand_addr="7b83f390c3e382b95f6539bf2202f40d", r1}, 0x14) rt_sigsuspend(&(0x7f0000000200)={0x3f}, 0x8) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$cont(0x1f, r2, 0x100000000, 0x7) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x0) r5 = getegid() lchown(&(0x7f0000000240)='./file0\x00', r3, r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x705080, 0x0) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) fchdir(r6) fstat(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000380)='./file0\x00', r4, r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x100, 0x0) ioctl$CAPI_NCCI_GETUNIT(r8, 0x80044327, &(0x7f0000000480)=0x1) mkdir(&(0x7f00000004c0)='./file0\x00', 0x208) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x2203, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x600, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20081) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x1000, "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"}, &(0x7f00000016c0)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000001700)={r11, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x8, 0xf000000000000000, 0x3ff, 0x8000}, &(0x7f00000017c0)=0x98) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000001800)=0xa, 0x8) r12 = syz_open_dev$dspn(&(0x7f0000001840)='/dev/dsp#\x00', 0x401, 0x400084) setsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000001880)=0x80000001, 0x4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000001900)={0x4, &(0x7f00000018c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r9, 0xc0086421, &(0x7f0000001940)={r13, 0x2}) r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980)='/proc/self/net/pfkey\x00', 0x80801, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r14, 0x40045730, &(0x7f00000019c0)) 10:24:46 executing program 1: socketpair(0x0, 0xa, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x198cb9150ce64040}, 0xc000) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x5, 0x8000) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x80000000, 0xffff, 0x1, {0xa, @sdr}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@empty, @loopback, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@loopback, @loopback, @empty, 0xb9, 0x78048d56, 0x3f, 0x100, 0xfffffffffffffff9, 0x0, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r7, 0xea, 0x82}, &(0x7f00000005c0)={'enc=', 'oaep', ' hash=', {'wp512\x00'}}, &(0x7f0000000640)="6b00e0b2e2cfaf98171b1f8c858ce9b932cf4a1aeefbb8157ae27c4247c612ec02adada21fbb73b9727d0a4860aadbfd0a7664ecefe153ea49b8d9c4036b7296294d0242638aee5290fc975078312a2c0bcafc857bd2022cd60cfe67e72b9d8b4ec2e99edc8a00d02270046e627cf23562d45e1b1d7ba97a900ec24d29ee593d1175c507489d8d0909b02347384fe001ddab4c5cda9486c961582f3dae041b1896323129f3a71286d10b51f0c1fc9770c4667cfefa75e2b89d2751bf9d9c10e10de87cdac2c7355c4b4eafdb60891d901cf4c7db0c895c06627aec2177daf5e53671803cb9fdd40ad4d7", &(0x7f0000000740)=""/130) r8 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x100, 0x80000) write$P9_RWALK(r8, &(0x7f0000000840)={0x23, 0x6f, 0x2, {0x2, [{0x4b, 0x0, 0x7}, {0x40, 0x3, 0x3}]}}, 0x23) r9 = socket$vsock_stream(0x28, 0x1, 0x0) write(r9, &(0x7f0000000880)="1d16a24d612317bebbaad26ad4f576dc903db390eaf539a572dd8aa42fad582cda287b69632482ae60b630e640db677ddf19e8777a32e6ecc7648a67339c59617af00a25da3eeb9a9b1421225c012edf3cbb5419e09fae85a18fdac5f5c833f817e6c6e340a14e742b9449dcc3ffec9bda8310b3ee88a220d719651a3a404e5b57babaaa022f51ad1a7f50f5d69313c660157df49c5d8b9929fa1a", 0x9b) r10 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000940), 0x100000) r11 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000980)) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f00000009c0)={0x0, r11, 0x9, 0x5, 0xfffffffffffffbff, 0x7fffffff}) r12 = syz_open_dev$dspn(&(0x7f0000000a00)='/dev/dsp#\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000ac0)={[0x1e000, 0x4000, 0x1000, 0x15000], 0x4, 0x0, 0x7}) ioctl$PPPIOCDISCONN(r3, 0x7439) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r13, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/kvm\x00', 0x80000, 0x0) socketpair(0x9, 0xa, 0x5, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0xfffffffffffffff7}, &(0x7f0000000d80)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r14, 0x84, 0x79, &(0x7f0000000dc0)={r15, 0x7f, 0x6}, 0x8) syzkaller login: [ 122.132530][ T7877] IPVS: ftp: loaded support on port[0] = 21 [ 122.223286][ T7879] IPVS: ftp: loaded support on port[0] = 21 10:24:47 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa00, 0x0) ioctl$TIOCCONS(r0, 0x541d) read(r0, &(0x7f0000000040)=""/4096, 0x1000) syz_open_pts(0xffffffffffffffff, 0x482) accept4$unix(r0, &(0x7f0000001040), &(0x7f00000010c0)=0x6e, 0x400) r1 = syz_open_dev$amidi(&(0x7f0000001100)='/dev/amidi#\x00', 0xffffffffffffff84, 0x20001) getpeername$netlink(r1, &(0x7f0000001140), &(0x7f0000001180)=0xc) syz_open_dev$dri(&(0x7f00000011c0)='/dev/dri/card#\x00', 0x7, 0x40) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001200)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000001240)={0x2, r3}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001280)='/dev/btrfs-control\x00', 0x8d40, 0x0) read$FUSE(r4, &(0x7f00000012c0), 0x1000) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000002300)=""/251) pipe2(&(0x7f0000002400)={0xffffffffffffffff}, 0x4000) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000002440)) r7 = creat(&(0x7f0000002480)='./file0\x00', 0x40) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000002580)={'nat\x00', 0x0, 0x3, 0x7b, [], 0x1, &(0x7f00000024c0)=[{}], &(0x7f0000002500)=""/123}, &(0x7f0000002600)=0x78) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000002640)='trusted.overlay.nlink\x00', &(0x7f0000002680)={'L+', 0x7}, 0x28, 0x2) r8 = syz_open_pts(r4, 0x410000) ioctl$KDSETKEYCODE(r8, 0x4b4d, &(0x7f00000026c0)={0x80000001, 0x10000}) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000002700)=0xfff, 0x4) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_timeval(r9, 0x1, 0xa, &(0x7f0000002740), &(0x7f0000002780)=0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/hwrng\x00', 0x266000, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000002800)={'veth0_to_hsr\x00', 0x3, 0xffffffff80000000}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002940)={0x0, @rand_addr, @multicast2}, &(0x7f0000002980)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)=@gettfilter={0x74, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, r11, {0x0, 0xa}, {0xfff2, 0xfff3}, {0x0, 0x8}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffffffffffffc}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x94}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syncfs(r12) [ 122.281689][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 122.388844][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.396976][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.405044][ T7877] device bridge_slave_0 entered promiscuous mode [ 122.427450][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.434518][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.443444][ T7877] device bridge_slave_1 entered promiscuous mode [ 122.451226][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 122.465974][ T7883] IPVS: ftp: loaded support on port[0] = 21 [ 122.496338][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.517899][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.540973][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.549990][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.558109][ T7879] device bridge_slave_0 entered promiscuous mode [ 122.576677][ T7877] team0: Port device team_slave_0 added [ 122.587201][ T7877] team0: Port device team_slave_1 added 10:24:47 executing program 3: socketpair(0x11, 0x40007, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6b, 0x80400) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000080)=""/93, &(0x7f0000000100)=0x5d) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = gettid() r4 = gettid() r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') r7 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x404) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000240)={r6, r7, 0x200}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x1b}, 0x3e}) r8 = syz_open_procfs(r3, &(0x7f00000002c0)='cgroup\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000300)={[{0x8, 0x8000, 0x9, 0x0, 0x4, 0x7, 0xc5b, 0xc686, 0x9d7, 0x3, 0x2, 0x3, 0x3f}, {0x3, 0x3, 0x6a5, 0x6, 0x7, 0x9, 0x101, 0xc6, 0x1, 0x2, 0x7, 0x7f, 0x4}, {0x4, 0x200, 0x38, 0x9, 0x2, 0x5, 0x7, 0x9, 0x78c, 0x5, 0x401, 0x9, 0x4}]}) ioctl$TCFLSH(r8, 0x540b, 0x3) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x20010, r9, 0x0) r10 = accept$inet(r0, 0x0, &(0x7f00000003c0)) r11 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000400)=r11) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x40000, 0x0) ioctl$TUNSETFILTEREBPF(r12, 0x800454e1, &(0x7f0000000480)=r6) r13 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r13, 0xc0345642, &(0x7f0000000500)={0x1, "fa06d2ecd394ac46021a166de00a26e7cfde6943e2ef6fdcf01591a12dc5e73e", 0x2, 0x1}) r14 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x1, 0x2) read(r14, &(0x7f0000000580)=""/142, 0x8e) ioctl$VIDIOC_QUERYCTRL(r12, 0xc0445624, &(0x7f0000000640)={0x818, 0xb, "a9815aacfccc77a8f271a897f6728e8780907b14eef69d5a18522d667455d6e3", 0x1, 0x7, 0x6, 0x7, 0x10}) r15 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0x100, 0x0) ioctl$EVIOCRMFF(r15, 0x40044581, &(0x7f0000000700)=0x3) r16 = openat(r14, &(0x7f0000000740)='./file0\x00', 0x0, 0x160) ioctl$VIDIOC_S_JPEGCOMP(r16, 0x408c563e, &(0x7f0000000780)={0x3, 0x7, 0x25, "c011ed31bbf01b952ab71f076120754995fe4037d13678ed3396fdc7f2dd2a5131772de9505eb445c85a2c9733ed6ce56a028c64619a09da94a1cfbe", 0x35, "0eeb4b342c09935d586bbae173e18fa0a1db843c73bc6cf25e2f797a1c1a024202a7815ea2fc7adfe10a86bd72ed1104a6ad4bc9de23cc4efeed7a2d", 0x70}) [ 122.593005][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.600800][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.617687][ T7879] device bridge_slave_1 entered promiscuous mode [ 122.709335][ T7877] device hsr_slave_0 entered promiscuous mode 10:24:47 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4ffd1b61ab002aa5, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x0, 0x58, 0x0, 0xc516}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x221000, 0x2) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2) fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v2={0x0, 0x1, 0x4, 0x3ff, 0x97, "71792cb4eae6bf27737b7ed93871afff259308d51fe5d69c2ee583a547fef921cd17064dfdfff0c2ad877a8750c045e8d52e53ceb69b68e548e7ab1a69e67f3f526e917712688e755986bc159b0c64b0960c068b6a1f8c42fba71de2a9ca7f255187d1357de293c4675e57d1d64d37eb9516645c07a9a8559482c41a71025ab6dd28e9f59b3339a0691a601c607c0d8d8bb9e6a32e10d7"}, 0xa1, 0x2) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x400880, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000240), 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) r3 = semget(0x1, 0x1, 0x42) semctl$IPC_RMID(r3, 0x0, 0x0) readlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) r4 = syz_open_dev$vcsn(&(0x7f0000001480)='/dev/vcs#\x00', 0x9, 0x81c0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000014c0)={0x1, r0, 0x1}) recvmmsg(r1, &(0x7f00000020c0)=[{{&(0x7f0000001500)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)=""/191, 0xbf}, {&(0x7f0000001640)=""/112, 0x70}, {&(0x7f00000016c0)=""/110, 0x6e}, {&(0x7f0000001740)=""/196, 0xc4}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/96, 0x60}], 0x6, &(0x7f0000001980)=""/126, 0x7e}, 0x81}, {{&(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001a80)=""/31, 0x1f}, {&(0x7f0000001ac0)=""/47, 0x2f}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/197, 0xc5}, {&(0x7f0000001cc0)=""/75, 0x4b}], 0x5, &(0x7f0000001dc0)=""/154, 0x9a}, 0xcf89}, {{&(0x7f0000001e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/124, 0x7c}, {&(0x7f0000001f80)=""/127, 0x7f}], 0x2, &(0x7f0000002040)=""/104, 0x68}, 0xff}], 0x3, 0x4, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000002180)='/dev/admmidi#\x00', 0xaa9, 0xa000) write$cgroup_subtree(r5, &(0x7f00000021c0)={[{0x2d, 'cpu'}, {0x3591cc921bfc05a9, 'memory'}]}, 0xd) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002200)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000002240), &(0x7f0000002280)=0x4) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/sequencer2\x00', 0x197ca5d223b4f23e, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000002300)=0x1ff, &(0x7f0000002340)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002380)='./cgroup.cpu/syz1\x00', 0x1ff) geteuid() ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000023c0)='/dev/mixer\x00') r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x9) ioctl$VT_ACTIVATE(r7, 0x5606, 0x6) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002400)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000002440)='/dev/zero\x00', 0x18000, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x41007701, &(0x7f0000002480)='/dev/vcs#\x00') [ 122.807716][ T7877] device hsr_slave_1 entered promiscuous mode [ 122.864156][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.871382][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.879208][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.886297][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state 10:24:47 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x105040, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100)=0x1000, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x100000000, 0xfffffffffffffffc, 0x2}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x41800, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x7, 0x4) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffa000/0x3000)=nil) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c, 0x800) splice(r2, &(0x7f0000000240), r4, &(0x7f0000000300), 0x200, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000380)='/dev/usbmon0\x00', 0x2, 0x0) splice(r0, &(0x7f0000000340), r5, &(0x7f00000003c0), 0x9, 0x4) r6 = socket$isdn(0x22, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, [], [{0x6, 0x8, 0x3, 0xe28, 0x6, 0x8}, {0x7f, 0x800, 0x7, 0x8, 0x5, 0x4}], [[], [], [], []]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000005c0)={0x0, 0xfffffffffffffffb, 0x7fff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x14fc00, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000680)=0x2) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r8, 0x40206417, &(0x7f0000000700)={0x2, 0x9, 0x1, 0x0, 0x8, 0x7c0db764}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x2, 0x0) sendto$unix(r9, &(0x7f0000000780), 0x0, 0x4000080, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x8000}, 0x6e) r10 = syz_open_dev$sndpcmp(&(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0x2, 0x14b040) connect$inet(r10, &(0x7f0000000880)={0x2, 0x4e21, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f00000008c0)="0f20d86635080000000f22d80f214a642626f6150f01c50ff7f40f01ca66b8000000800f23d00f21f866350000000e0f23f8d37101b8340c8ec00f01cb", 0x3d}], 0x1, 0x2, &(0x7f0000000940), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x1ff) r11 = creat(&(0x7f00000009c0)='./file0\x00', 0x21) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) [ 122.921326][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.958607][ T7886] IPVS: ftp: loaded support on port[0] = 21 [ 122.996508][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.008869][ T7889] IPVS: ftp: loaded support on port[0] = 21 [ 123.084137][ T7883] chnl_net:caif_netlink_parms(): no params data found [ 123.099742][ T7879] team0: Port device team_slave_0 added [ 123.128540][ T7879] team0: Port device team_slave_1 added [ 123.149656][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.190709][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.247805][ T7879] device hsr_slave_0 entered promiscuous mode [ 123.305760][ T7879] device hsr_slave_1 entered promiscuous mode [ 123.345281][ T7879] debugfs: Directory 'hsr0' with parent '/' already present! [ 123.353658][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.360942][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.368759][ T7883] device bridge_slave_0 entered promiscuous mode [ 123.375921][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.395604][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.403445][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.411871][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 123.442762][ T7892] IPVS: ftp: loaded support on port[0] = 21 [ 123.452201][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.459712][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.468833][ T7883] device bridge_slave_1 entered promiscuous mode [ 123.484259][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.493268][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.501686][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.508875][ T7884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.517464][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.526057][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.534300][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.541390][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.584090][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.596659][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.610299][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.639028][ T7883] team0: Port device team_slave_0 added [ 123.648854][ T7886] chnl_net:caif_netlink_parms(): no params data found [ 123.663657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.677726][ T7883] team0: Port device team_slave_1 added [ 123.704337][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.724424][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.737413][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.747769][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.793603][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.800823][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.808807][ T7886] device bridge_slave_0 entered promiscuous mode [ 123.816289][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.823502][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.831369][ T7886] device bridge_slave_1 entered promiscuous mode [ 123.838862][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.849736][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.858426][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.866928][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.896822][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.906145][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.916333][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 123.956629][ T7883] device hsr_slave_0 entered promiscuous mode [ 124.007262][ T7883] device hsr_slave_1 entered promiscuous mode [ 124.065274][ T7883] debugfs: Directory 'hsr0' with parent '/' already present! [ 124.073498][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.083566][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.091459][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.108501][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.124744][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.139169][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.198759][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.207079][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.214608][ T7889] device bridge_slave_0 entered promiscuous mode [ 124.222264][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.229615][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.237186][ T7889] device bridge_slave_1 entered promiscuous mode [ 124.252684][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 124.272984][ T7886] team0: Port device team_slave_0 added [ 124.302913][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.310650][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.318735][ T7892] device bridge_slave_0 entered promiscuous mode [ 124.326788][ T7886] team0: Port device team_slave_1 added [ 124.332527][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.340275][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.348072][ T7892] device bridge_slave_1 entered promiscuous mode [ 124.357800][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.367136][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.376061][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.383205][ T7884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.391414][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.401533][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.488080][ T7886] device hsr_slave_0 entered promiscuous mode [ 124.525808][ T7886] device hsr_slave_1 entered promiscuous mode [ 124.565292][ T7886] debugfs: Directory 'hsr0' with parent '/' already present! [ 124.574857][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.583579][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.592277][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.599502][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.612570][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.624671][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.635842][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.652032][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.676787][ T7889] team0: Port device team_slave_0 added [ 124.688636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.698697][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.707561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.717982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.737875][ T7889] team0: Port device team_slave_1 added [ 124.797651][ T7889] device hsr_slave_0 entered promiscuous mode [ 124.835571][ T7889] device hsr_slave_1 entered promiscuous mode [ 124.885393][ T7889] debugfs: Directory 'hsr0' with parent '/' already present! [ 124.893993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.901929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.910416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.939571][ T7892] team0: Port device team_slave_0 added [ 124.954000][ T7892] team0: Port device team_slave_1 added [ 124.978887][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.987593][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.999291][ T7879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.011532][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.077538][ T7892] device hsr_slave_0 entered promiscuous mode [ 125.135698][ T7892] device hsr_slave_1 entered promiscuous mode [ 125.175291][ T7892] debugfs: Directory 'hsr0' with parent '/' already present! [ 125.195946][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.204723][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.235756][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.294853][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.333694][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.343587][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.359427][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.368860][ T7883] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.380905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 125.390789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.399541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.408254][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.415378][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.424390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.437370][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.455718][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.464346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.478990][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.486141][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.495889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.504562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.513689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.522420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.530964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.541460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.549948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.558361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.572995][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.588909][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.603235][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.613822][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.622104][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.630863][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.639334][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.647442][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:24:50 executing program 1: socketpair(0x0, 0xa, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x198cb9150ce64040}, 0xc000) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x5, 0x8000) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x80000000, 0xffff, 0x1, {0xa, @sdr}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@empty, @loopback, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@loopback, @loopback, @empty, 0xb9, 0x78048d56, 0x3f, 0x100, 0xfffffffffffffff9, 0x0, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r7, 0xea, 0x82}, &(0x7f00000005c0)={'enc=', 'oaep', ' hash=', {'wp512\x00'}}, &(0x7f0000000640)="6b00e0b2e2cfaf98171b1f8c858ce9b932cf4a1aeefbb8157ae27c4247c612ec02adada21fbb73b9727d0a4860aadbfd0a7664ecefe153ea49b8d9c4036b7296294d0242638aee5290fc975078312a2c0bcafc857bd2022cd60cfe67e72b9d8b4ec2e99edc8a00d02270046e627cf23562d45e1b1d7ba97a900ec24d29ee593d1175c507489d8d0909b02347384fe001ddab4c5cda9486c961582f3dae041b1896323129f3a71286d10b51f0c1fc9770c4667cfefa75e2b89d2751bf9d9c10e10de87cdac2c7355c4b4eafdb60891d901cf4c7db0c895c06627aec2177daf5e53671803cb9fdd40ad4d7", &(0x7f0000000740)=""/130) r8 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x100, 0x80000) write$P9_RWALK(r8, &(0x7f0000000840)={0x23, 0x6f, 0x2, {0x2, [{0x4b, 0x0, 0x7}, {0x40, 0x3, 0x3}]}}, 0x23) r9 = socket$vsock_stream(0x28, 0x1, 0x0) write(r9, &(0x7f0000000880)="1d16a24d612317bebbaad26ad4f576dc903db390eaf539a572dd8aa42fad582cda287b69632482ae60b630e640db677ddf19e8777a32e6ecc7648a67339c59617af00a25da3eeb9a9b1421225c012edf3cbb5419e09fae85a18fdac5f5c833f817e6c6e340a14e742b9449dcc3ffec9bda8310b3ee88a220d719651a3a404e5b57babaaa022f51ad1a7f50f5d69313c660157df49c5d8b9929fa1a", 0x9b) r10 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000940), 0x100000) r11 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000980)) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f00000009c0)={0x0, r11, 0x9, 0x5, 0xfffffffffffffbff, 0x7fffffff}) r12 = syz_open_dev$dspn(&(0x7f0000000a00)='/dev/dsp#\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000ac0)={[0x1e000, 0x4000, 0x1000, 0x15000], 0x4, 0x0, 0x7}) ioctl$PPPIOCDISCONN(r3, 0x7439) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r13, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/kvm\x00', 0x80000, 0x0) socketpair(0x9, 0xa, 0x5, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0xfffffffffffffff7}, &(0x7f0000000d80)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r14, 0x84, 0x79, &(0x7f0000000dc0)={r15, 0x7f, 0x6}, 0x8) [ 125.666500][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.674211][ T7883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.684898][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.696119][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.704822][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.711949][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.723465][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.733795][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.743419][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.750543][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.763356][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.784467][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.785310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 125.796973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 125.802218][ T7886] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.815737][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.823696][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.834692][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.844130][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.853113][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 10:24:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sync_file_range(r1, 0x80, 0x1f, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x35, 0x1, 0x4) [ 125.861746][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.870747][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.879276][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.894638][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.911394][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.920313][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.929039][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.939285][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.952952][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.964618][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.973618][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.985403][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.993828][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.001194][ T7884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.010412][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:24:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x2f, 0x0, 0xfd80, 0x0, 0x367}}], 0x1c918c89c504397, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x0, 0x0, 0x50000}]}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, {0x7fff, 0x4, 0xffff, 0xfffffffffffffffc, 0x7ff, 0x9}}, 0x8) [ 126.042676][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.062074][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.110700][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.117856][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.129281][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.138242][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.146765][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.153891][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.165540][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.173974][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.216431][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.224202][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.240904][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.268673][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.277421][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.286201][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.294657][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.303321][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.311746][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.320311][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.328656][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.337637][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.346350][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.353418][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.361607][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.370919][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.379839][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.389182][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.397785][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.406541][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:24:51 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x2f, 0x0, 0xfd80, 0x0, 0x367}}], 0x1c918c89c504397, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6, 0x0, 0x0, 0x50000}]}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, {0x7fff, 0x4, 0xffff, 0xfffffffffffffffc, 0x7ff, 0x9}}, 0x8) [ 126.594051][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0 10:24:51 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10280, 0x0) finit_module(r0, &(0x7f0000000080)='/dev/kvm\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)={0x29, 0x4, 0x0, {0x5, 0xc3a, 0x1, 0x0, [0x0]}}, 0x29) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x827}]}) [ 126.639925][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.720404][ T7966] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 10:24:51 executing program 2: getitimer(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000540)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) timer_getoverrun(0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1821ffffffffffffe700000000000000850000003e0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd7d}, 0x70) dup2(r0, r1) 10:24:51 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x6a, "b5c37d638cbab096340d8613ef1fe567e2ad2773651e325f79e8718b096083f1f2c8244d83b9bc52103aa7481806ca724c8657a021508efc1df572ca2c291faa0b6da9d139df6563df18863e046bcea72f7a3a5061440e667d8b56f3924201ebf46a3bf9831295d77f821000"}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) [ 127.061342][ T7984] Unknown ioctl 1074021761 [ 127.101085][ T7990] Unknown ioctl 1074021761 10:24:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x20000004e20, @broadcast}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) sendto$inet(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r0, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003cc0)=""/73, 0x49}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') shutdown(r0, 0x1) 10:24:52 executing program 4: r0 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r0, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) write$P9_ROPEN(r3, &(0x7f0000000400)={0x18, 0x71, 0x1, {{0xa, 0x3, 0x4}, 0x8}}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r2, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) prctl$PR_SET_FP_MODE(0x2d, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0040000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r5, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000540)=0x80, 0x1000) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0xfee9, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0040000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000380)=""/127, &(0x7f0000000140)=0xfffffeef) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffffffffffe43) write(r1, &(0x7f0000000400), 0x0) sendto$inet(r2, &(0x7f0000000580)="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", 0x132, 0x4007ffd, 0x0, 0x227) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 10:24:52 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000240)='..', &(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) pivot_root(&(0x7f0000000080)='./file0/file0/../file0\x00', &(0x7f00000000c0)='./file0/file0/../file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x5, &(0x7f0000001640)=[{&(0x7f0000000540)="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", 0x1000, 0xa0db}, {&(0x7f0000000140)="993184e014737e63ddb9ccb32b602a779428854a73f49fb23e114e1a9005264e7eb1f6d7ba3344978df317867ceccde28a0037f00de947e390f3cea9a75cf3c7a25602af87f293886f735f66ae7ef98e97e392731fffdf275de4c575d09f0f635ce981e6a895d4670d333bc26666280a82b8220f", 0x74, 0x7}, {&(0x7f0000001540)="d8ba7fda80cb60c28d5ef8baec99b785bc6662b95f3be098e16ec3d3f732c5d3e74daa3764680a052d2035b6a5fc1ddf04a8c3b692d2b510a588c464dac5cbcb4783f3e19ec7cb299eae5c8978f9edcebd1afbd7f49a1053344bbc66c2bf8255e1f57e5ab507d6d64539b95409dc9eccca7c41dce7099fc1f77f70435280b891ffb163cfd893c59b3691fdc3e46e4b110c18a9f6a25ab587d4bff8ffd1df55bd72fecb0dc8945509ddba0e4e00f1a1288a293742694460e62543743b1050425ddd68bd915fa8c3aeced4e97b88", 0xcd, 0x7}, {&(0x7f00000001c0)="8d10c702429dc0705ff16b2069d45a69b8cb728e8d4752929b25e5d6ae5b6553ba2a4706f365", 0x26}, {&(0x7f00000002c0)="df6397d0a286d7bc08cbbaa7f341f25adead6d3750ffae2cd5216644a35a3b52354d2fac5c0d7ddcd0ca8c29af33896591b4ef343f4e202d5455f5307ea34ca5fa2a7b1b40637df73b3ed7ae88653495f0cb75ad", 0x54, 0xa11}], 0x41004, &(0x7f0000000380)={[{@wsync='wsync'}], [{@euid_lt={'euid<', r0}}]}) 10:24:52 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200100, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x8, 0x9, 0xffff, 'queue0\x00', 0xd0}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x2}, 0x2) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r1, &(0x7f00000002c0)={0x2, "cd32e0368d743f23edfeeeb9f3969104788115b473867f54d6f5a66e355766f1be3906e34f429e70c7f1c55f237986340446eea837014bc0d2"}, 0x41, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x88) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x2af, r2) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000001c0)={{0x8000, 0x200, 0x7fffffff, 0xffffffffffffffff, 0x6, 0x7}, 0x4}) 10:24:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fffffff, 0x200000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "16aab436f8929794", "b839a24a78a7dc85e828f450e7abab1a7c14b7b251ff07da43ff48e609d206b0", "1e2b31d6", "3af30af42cca9989"}, 0x38) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x622c04, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)=0x3a) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) accept$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) connect$packet(r3, &(0x7f0000000800)={0x11, 0x10, r6, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r7, &(0x7f0000000440)=ANY=[], 0x208) r8 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r8, r7, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'teql0\x00', 0x20}) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r9, &(0x7f0000000440)=ANY=[], 0x208) r10 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r10, r9, &(0x7f0000000000), 0x8080fffffffe) r11 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r11, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000180)={r11, 0x4, 0xd467, "9f4c3fda2a59bf6337760b5496a2bfcb80a214ae7a45dc3afddddc16f54d495e3addf60d644e48cc5130c1b9f57a18605799397db58c722bd01eb2925f426eae29b59c0cafa1213667addbfe64104126a2bf10bc"}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="04070000000000000000130000f0"], 0x14}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x44000, 0x0) 10:24:52 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 127.259514][ T8006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:24:52 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 127.335990][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.351849][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.372482][ T8012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.374586][ C0] hrtimer: interrupt took 39458 ns [ 127.399309][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:24:52 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d390d4b6213a969cbee98b96dd2f2ce902c5f4aed4c244835a7bef724b67f5493784065a855800a81d1d68bea907b1fbece6c5483c6d0493acf042e9d4f04e27ccdfdd3e981ec928ebfbe95a717b51b234d19be1e4bc9fed1fde151bc0281e604d1ac730067b381b3d16c211ec127a9cbd66cd338a440ac4522c37b7296563eef14cb4c410de5121ed1da76e5a550af4a9ac2eb9ab7d2740f8d52af351f68aad5b802c0e9d02fdcc690ef819cdbb0f1e90d75a85a05a1174b1dc1", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000600)='./file0\x00', 0x9) 10:24:52 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x8c0, 0xb, 0xfdedfb0706f24364, "3ea89dda7f1eef13f0cbd9b8402732570d13497089bd340d771c00", 0x38415262}) 10:24:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x1e7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 10:24:52 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffb6, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xffffffffffffff5f, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffa}]}]}, 0x28}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x201000) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000200)={0x10000, 0x3, [0x4, 0x7464, 0xffffffff7fffffff, 0x2], 0x40}) 10:24:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150081f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) 10:24:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x284000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x77, &(0x7f0000000100), 0xc) 10:24:52 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 127.812404][ T8055] EXT4-fs warning (device loop3): ext4_fill_super:3691: metadata_csum and uninit_bg are redundant flags; please run fsck. 10:24:52 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffff1af4, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x7) [ 127.867150][ T8055] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.977153][ T8049] EXT4-fs warning (device loop3): ext4_fill_super:3691: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 128.009730][ T8049] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. 10:24:52 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1e', 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x1, 0x800, 0x7ff}) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x6) sendfile(r5, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000100)={0x0, {0x0, 0x9}}) ioctl$CAPI_INSTALLED(r3, 0x80024322) write(r2, &(0x7f0000000340), 0x41395527) 10:24:52 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x25}, 0x3}, @in6={0xa, 0x4e20, 0x865a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e22, 0x0, @remote, 0x100}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xfffffffffffffffc, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}], 0xc8) r6 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r6, r3, &(0x7f0000000000), 0x8080fffffffe) r7 = openat$cgroup_type(r3, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000080)='threaded\x00', 0x9) 10:24:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086607, 0x20000000) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$kcm(0x29, 0x5, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x640800, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfaD\x00\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4%\xf4\x94\xa8>\xb1\xb1\xa2_&') 10:24:55 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 10:24:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='J@0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x18, 0x9, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0xc, 0x1, 0x0, r0}, @jmp={0x5, 0x8b7, 0x8, 0x0, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xa0}, @alu={0x7, 0x81, 0xc, 0xa, 0x2, 0x0, 0x7fffffffffffffe3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x3, 0xf9, &(0x7f0000001200)=""/249, 0x41000, 0x3, [], r3, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0xb, 0x1000, 0x2ed00}, 0x10}, 0x70) 10:24:55 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x208) r1 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0xfffffffffffffff8, 0x100000000}) unshare(0x28020400) r2 = socket$packet(0x11, 0x40000000003, 0x300) close(r2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 10:24:55 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0xfffffffffffffff9, {0x5, 0x7, 0x9, 0x4, 0xb0, 0x5}}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 130.507884][ T8097] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 130.555697][ T8108] device nr0 entered promiscuous mode 10:24:55 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:55 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) r2 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001380)=0x220, 0x4) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$alg(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)="02a32ade4bdbe3c6632e774d1cfb250b6cd0b76d394f22c44a96c068d5919f0b7c0cfe38a2228555b7c22222656819f2bb29f8a8db5e1ac9b74deb6381d55f9c82a52762634c7d59dd52056a16987a24cd2af82d8292e956eefaa1118e4ce28f3472695cff7c116978441a3d5d10a10bec83776dab3c3dd4e23d77de4060421f86a74060a0c00a3a17c2292f106217b070db99ac61fad0397c8068c623dc5934d019c1d7503edb6cf4704b9f24f386149fc9abefb2a68d7319d5fcf742e3c167255eaf8ebe2c3b", 0xc7}, {&(0x7f0000000140)="d5898496012c593ad560e25b87ab4b71f23b1e04fc88774dc84eb0a8fae12c9cc17aabc36f598416f0a639c48329532cced8f42769071b5b40c11d74cbc4b60ad5ee1c7206c3385611159eda8d9299125ec81ea50701a763b8af4407c8c6a43b137ab2b21a7ff64be05191eb101b90bcfe80b44012574af6b8ebf727ad5f6464671617bb18e0d889a7176cffd84e70ab00696fdc2a8b559b0f3f84c18ff6da6eb65d32a43d2e5fb96c8495d9ad4e01f2b41512295945efd64048526260fa9b1675adaea07663cd9451ba16f5120c6f28b21535be077264b9cfdde32775f9cc82f2b28986c769b6f6ccd490e4230c792f5aab45f91bb93859d73d3d1304577e59caebc8c2b622ace1f42106495d6970619e776d301fdab53f2fcd7cf4cba130b311d504b052894ee7b14e53a67a9e1a1d73c2d32499d0b9a7a0dbb4719d68f9f0f9c4d10927e8530e3b53b4e190d2cb16c0036442e84963a26e2f3a3dd085440ddda5f4f3408bda8103dfb9e40dad89490a1d08d5eb2465c6e2f46f61a1b6ec0c60a44ffedfcf8b2db082e70c4b0190814be1c281821a840268f3f350c63c7ce8f81d6495e8965c0d09498ea686da8c9ad78cefd2afb93a5ef10ea71a2e651124151a7e2b1c146fe87f1ca76c2c17488679f7820e3cf808f5f6b406934eef5f7492c8aeafe3d49d5de75170cc7e64f36d9381ff6c16fbdc1f53cb51a24d9c50946cb8bbe605073cafc6837a7ae7e694f6380a4c0be23cc9ed4195e21184752c9a90aed985e090b64fec90c74c2d4722987934b25ee522a210be028c2f126f0f66bc98b55a39389a6596538141e5b73ef6e83ca793704d46029dfa80ef26ebcfa19f449a656f41833903508bc2e91cf63649fca9f17bb7d8a3cfb487b4c6394a4bc3b6e1782f703b566c1bb9f38af4e3bae554ccb905fa2bcbefcef7b3d0010b666f6754c844bb71961707cd80e35f4edbb116c26c978ffa14bc4e51566c2b15a014893e0a52a5051baf82fab836be210fa4ca5a9083660b27d4764354cb907caf9c90b39bef1482b00c63b4dfe2bf9b60de02a5d83b3870ad9c6b1300c258d3aacbc6253c9a75b448a4e8a5fef14f8f04a97fe2152cf4de7df818e5da7582fc0aa3e7abc26fb0d11ba7588af51ef49edeafc56de0f7454a852ccfb73d45f9c9154b02bb79c79b196ee54fe6b03b8c9e69110192d113729272a3d4678699641109e2b1fe5eb51c2e3b24a344dd59974d6e180d75b93f2581b2067f44576319cf080c4eacfc7aca9f8af1225a0252e056bd0e97db7a49e817db31218d575c84e5dc7fb65ef3a15809671ea3b088869c18cc69d3aa3d12a85edfc652449e06286d2c80a50a02f87110fef376325e04f67420be1d5f2a2fb76ce8101fe49b6e23cb81b4f4c83a5f0e93bcaabb828e565c11c8915f1235b57317eba300b47a1c5fa7947d43988d6f97467af72b119adb4ff2aa36bb98d5f6d5d3a6574b03d3630373a41e27aafe299bdd5d99a08512f2bd09760126f5e7bb77a5c8d0aeebd8e57d6931a75d7550b595a231d79d9b35a239665d964a6ed174a4ba6d3a36f2344d8c200b22cde897d9502259f51d4f4e6c2e5a49142ebde19a7f0970d106b4c8538531dd1cf2925549f5746e43cecb719e86b2483dbeac911e1dda5d8c7e516d7161461256c4f114b3e34eae2fb363730e9a7ace18264acf40e85ba6619e93d674553db81003391a7f95e1613051142ebafc5eb7282a9785bad114dfb27b2af8974e4238d69f968e9a6a0dd804c9126e9052deb1d680aecd348bd9828aa26f539062c2812fe52756f1260a2ef2718198d96b3a59ab3faf2f1d6aac03c848827dc5f0ef073475c5ea7bfcf08229510339928513186f79b82e6435c3b1d4dcf451a26f6da607b4c1e4fc3e28b22c848dce9780de47334c36b18926423f9ceb9e5e8d76e33223bb87094629ed5e56df35e383dd90ca8a04e2148cb7ce1a72dbf8c4d16939fd30bff12c916c9ab1c85bfbd2bdf164e0a38ad28a9b947ba13efa0c116b689bfd4bf838742c378cbfac732f8df90fcb5814e89505864656f2829639fdd71fa45c7f1784ffeb6f247f49a57cec6ec1c356c585bd78400148e8e075a8784789056b05d4261250595b06020d7d7dd9ee0c50d0b219df77b2463ffa91216ef2752e5d67357450253df2f7253b2af5efa82e2c54da233afe5006d080370f87c04797bafeb542a7a02e689f79fba786743911ad24949ff5a2e7e401a20ded725d5d07c70c37b3173cf7f16d6d576b4badb337fe0519ea7658132acbb2e0fea92d3f155c8accdaa649d0a0396aae8579ad80211aedbc917ede1acf45aa59b399e6f782aff235020cb06a1468bbf7edeb82dbe03b2325a7ada436346a5fb434e15026220c3e19da881f3ec5523fda30af4ad2c63148bac9ad19e7a4c6f69ea77d19191aed25fd806e56a89f4b10d2e5a62b3169b98b3cf81f7ff5e0f685fe6ecf729f9fe04958db076eb46f8bb7ace747fefad2422ab266442f2ab6e885547aefde20016314c1c6cdc3c66075f35d042f096d434784b104b53981e35396b8129e4a2d603f2f8ef5a2d0e0b136219565c9831ffebfe4963bfc78b50e1b1aa3f33fd5b672e84dbb223a5fb0c0e8cbb47b7ec43b0edd48bb04e8a3157a7c10dcaafbad6f3467e42d70dc9d62421c3c3378d8146798c09c39fbf710f5d36982ec2c4b6a9d87568fb3a70c7acf9df897ad93451ef90ff128aa636641731ce945b0488f5bef81e8f0e409a3eccce860efed83cc612f6d565974ca64ae627d623ddd38be252e04e9edd0c310d60646faa62b822b5aaae3a5f207120d2525c311260896b610652e99787c698a8c19a7a95281d02bc0d780426a1be2779be956ad86c3bd52b099f71e3b6226937cbbea635bb5e174ffaa79154ba9c74d1319b8e30c2c5adc4faec9c35f09b1ef255e002df912a5805f0e8325c5ed0635a318c892abca0dad53898a04940ba88b55d3bc10299820cd2de206429a679a9aeca5f0ba7aec236ef4f3987612bd0b2a25950d9fb73ad199a3dc9b894207676f2ca332c3534cba3820ac229775dee19c2579944c642973a0857b4bacea2fa84af35fd03f068420f0a325c11c28dcc19f5d32e18940b0fbf64392ee8602da5b61b716989a41ee97b00c768bf822331a13344e9be810c357e63e4748f2a67e4ea22ba54bf0545ac46922dd59d6daf413c2773a8d7f0913f41991f1a052bf202a0dc0c184065e87632151e3e4be5c45a401b5613c9588b772082476ca40d9050f3f7b2182e0020332fb8e1a989e13cc171ef6b264c8b5f1d3860db86755ff582830e50554862b67e1181fffefcc7da1f475ea13a47f3e93120ba726cbb4b6fb50d8b50cbc4264a487ffee2f451a0461345d604d1be3187f1c2ddb383a1c28167244ab09e8a458cad91cc7031bcb1737a9374fdeda5458b9163e571f6c062eb0da59513395aff058684956f76399670d6a08fab3479cf48203e52bb2030ad72dc465b5d7aff165eaaca96678fad2b372b7f9c4f932d5cdb9c7ac18a53727321d2b2a0908b81ed53d0ec184c69dd8a64d8ac871c89ee29ee7a0e36331ce82803d5a55369323d22f52a34f0913d99036c8c416daa82174f4e153c550bf393d3226aa526433c37a73c07698362960b7109d15e546c11c290b852f8da572bf8aa625d93d43bac48bd14ca8e4eb3c52e0d169e2b54a8cafa608fc93a2f0a04259e86018905e40c12b43fbe5c2a49f450617dd8ecc94a07018f7461886aa674591c4cbae487619312710735b6cdca5fb9a26da0697a2ac37e2b6fe4a392a4a29e1b91e6d4d501870861f65666ac7e2230012d73c302d0e44be481126962b5d39fd0001a756aeeb6ec28818f0f7d8c42916c7e258eafac377662b37844f8501023cd91be1e49cf6bc862188f2e7583a3dac0613b951a49e551c4749dd933cd07287084f977e274207a467bfd84309244ef75e42ddb888171c64832a48e6e1f799db6a922a7b2c724363628b91603bdbb75b714c3adea1001cd43dcaa7b4e07f1b07365e3f408b92b27083d0ee516bfe48997fbae75178d039cd9ec5663ad58b8e1101fb76a276cf930d2d6b1de585d45e9e9f8c62cef19ad549e3b60309396fdf1e0b271d0aee1680731b2a41a6a04306585ddceaa5fbdbe1e619e4fa682444fafbf24e0bec9df732624a98176a381917a782ae935760f597ae1931710e909397dafc62aff23de950a962cf1014c570783d5e355e08a4c9ce8641a545cc2f13e1522d3a2704f3e367d03105534b53a1cd1974835231c2774b153f37c64906c4406b5de06c0b85394d4574b092348ba069d994725792326fdefb276aa404f60c2e252422a793903708824f2fd4ae5fdbc94d4e228bee755e48111d2937a9057303e9799d7743e7591ef1114c8b2b7b7d57c154c127b1092a75515824b451833980c8d7da0f1de49ca3691f42156f4dae1cc5dac512504b984388ee81306da5be1190c549dfc601b4154809594f3a329a27f0bc210d63cc0a408cf84ab8e61860cdac7d37192d60bf66b333c1c8e6a47725cc64d40355794c9d3b5fdd3a070a7a7300089a3ef2972120dbaafef416add69aaeb78b2f4392ad0148ef7a56bb7c0a013c090d7dd521d5f1dffa9d1122722aad072c34d2cab02ac51dcf7b3e7e967d828738e1d0a34932fd6a7aa6a18e2b2ac552429a119a1ac9f795579a46bd92c49e69db3cc8057da131671317627dc92023f6087c0ca156089d34bad37f59b06118a3682f0628e532e56a990f1190e3422009fd33ee1be13c75663aefe0c8fbed055f10ec3f4ff410cfdd113168bd75d130df0ab5929734010026946729f667e68a865704413ec38ffba51380e16c495d1a83ddff2880c61d895212b00e2fb94ea15d4ffc6299f57f7bc45de69c23e560fa4d67648892fe9a8d057999fb9e72338826c8db777a240d5acba67cc3bfdc6918128d6a68308d6d6a0391ae082d858df5a6d5d4951d5a12201d723121f7fe82625f18f3b378b003bc0ac3f40536666c269f56382170c1e38d0fb6e7e67698ae250535cc383198e1e1169cecb43221c304c1b5f28c4e846b73596567af0b2e0a02fd9f3a446dcf4c28730c59e49190aa7251302f800084bdd9cf390e1fd2fb7e7b8c26bb60c99f304725a26059185424ad7eea6a3f73542f82ea16cd236b6964c799d1677f72bed30cf648b5365ecaa4f65401b24823cf3d844f55681688d23134d8a9e3f3b79d0ca018cf4b29e7df4d46942055430fd9e40f9a9e9edc89ac100ff61e77ad6bc36ad0d4e811371f5c6629d12777826c2ea103ac478e09494c8ef862ecda2bc3126795484dd7ea687eeef9dd5b6d306ae5a2b6745de0e83bc8ac7db1c7e23861289b9e18682b183957cc2fdf963221133816b6f0cc8cdaaaad8c398a745a8d9abc5f1eededf0eef1f10baf2d9f74bed052b9bc8b1590026209bb71bc4de4351efc86b363d4bb232b1630460b0b1d0f6642c02c22101e7c56bc3eb29f8503fa312b4adba84a788cb6507e05b36df75eaafc9d9bc2cb44ee85431a77f018fb04593d4cc5d9855c8ab62f07cea2d59a6dfc13f03a200eaa33ff7eee9bffd10e539e2c6d723f23d4c2c6eaebd49c08b00bd8e982763a27e1db0d29ff5644c70f70254b4f4a4a897e66d776b27020e25ec6a27c9347e20650cfadf08d453387ba0fb76e2fc8971470847030d7154f672d18ef520d0da9c82e4334c59871d7dd83edf7876ef4c9256b10a189690acdad2a7c2de0a35ffbff044efe9a511996", 0x1000}, {&(0x7f0000001140)="20adc51b2f89c82a4cdd35b20165ecd4b2a8172bc569b0afcb5a091e3d9708a54c3dbdbd4e391ebe88effe614791e20190311ca32694f6b321ad788f5fffbe95bf69ffcbef171654e3c3e2dd08d7a673bb15b95a928f31ef256575833b80a628f68bddb337ae8077104847dc2ce2a54a88c4b0a62a413468b9c032056edc1a073c493b63477af23bc3a9f13fcc2e520fd85c053cac4d43a7bd446577fa576879ab0931a7189a80fa3032d77e41ae0783c555ce396117ade9cf3c3d4b428861d08475898a", 0xc4}], 0x3, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffe65}, @iv={0x68, 0x117, 0x2, 0x4e, "90aac4fb01d51ae796374470bc51ae216e563972bd229eeb74109cdc5123f12971ac5603b38f39bc97e4335e40ba5da0865cc7b6e24d124708b619670182316487230cd1fbb2fe6a1c74a894a19c"}, @assoc={0x18, 0x117, 0x4, 0x69}], 0xf8, 0x8000}, 0x20041000) 10:24:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) r2 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x2}, 0x20}, 0x10) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc6844e3273d26ce5e525601226e94e117245ea7a23f7e146861a0772e000000000f0000000000000000000000000000000000000000004000", "0ec832aa37c991831eb25895d52dc4092a46931c5c3159d6b4be05e571a62983"}) 10:24:55 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x20}, 0x98) [ 132.032451][ T8108] device nr0 entered promiscuous mode 10:24:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000440)={0x8001, 0x5, 0x7ff, @local, 'lo\x00'}) r1 = socket$kcm(0x2b, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x3, @rand_addr="6698d43800"}, 0x1c) r4 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x4, 0x101000) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000340)={0x1, 0xad29, 0x96e, 0x100}, 0x10) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380)='/dev/udmabuf\x00', 0x2) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x1, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYPTR=&(0x7f0000001700)=ANY=[@ANYPTR64, @ANYBLOB="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", @ANYPTR]], @ANYRESHEX=0x0, @ANYRES32=r1], @ANYRES64=r3, @ANYBLOB="2b9822c2a64e434b540ddbb2e801caef56"]], &(0x7f0000000180)='GPL\x00u\xf1\x85y*_\xb2\xf0S\xfe\x8e\xdfj\a\x19\v\xc2\x8c\x891\xf9D\xe1\x13\xc4)W\xd1}3\x9d\x10\xad\ac\xdc\x81\xe2\xa9\x8d\xdf\x98u1\xc1\xc5\xa8\xe7\xd4[\xb7\xfa\xd3Z\x9a\xa4\xd6\x8e@\x1f\xdc\xa1\xf0e\x9b\xed.\xbf\xd2\xc2\xcdg\x9fvt\",\xe1[\xb1u\xc2f.j\x84qg(h\xba\xe0\x1a[\x11o\xf7\x7f\x05]\x1c1\x9dL(n\xce\xeb\vvRa\xb2\xd1f\x1b3\xe6Xy\x10e\xe8\xb2\xbf\xc0\xce\x7f\xfa\xaf\xe9mt2\xa8PA\x88\xf8\xff\xff\xffL\xfc\x16\xf1\x9b\xe96\x10K\x02\xee\xb2=\xd2[\xca\x0f\xd4\x10ML,\x9cJ\x88(_\xf3\xfa\xd2\xdd\xac\x18\x94>\x1f\x17\xc0\xabg;e\xa1qf\xcds\x8a\xa6\"\x9b\x97\xa5\xe2c\"G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\xee\x8d\xbc\xd3\x93*\x1e,\xcd\f\x1d+U;\xb1\xbf8\x1b\xb4\xbc\x19_W\x84a;\x0e\x8flu\xd8\xc7\xa0_\"\xba\xa5Y\xaau\x91Br\xe2\b\x94\x1f\xcb)m*\xf6\xc5h\xb99\x0e\x93D\xb1\xfa\xadI\x1e\xdbt%C\xcdQ9t\xa2X\x9bM\x18\x86\x02\xd5cr`o\xd0ky\xea|\xd0\xbfz\xeb\x8d5B\xdc\"d\x87\xe4H{/\xbdA\x16\xd8\xf1t~\xa2\xc9\x1e\xe9T7\r9\b\xbc\xdb\x8a\xd15(\x1e\x99!\x9e)\x8eQ\xc4\\\x03\xfe\x14\xa0', 0xfffffffffffffffe, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:24:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) pwrite64(r0, &(0x7f0000000080)='\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x22) r2 = socket$kcm(0x29, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x300000000000000, r2, 0xfff, 0x0, 0x4, 0xffffffffffffffff}) 10:24:57 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:57 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x208) r1 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0x8080fffffffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='hsr0\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x24, 0x37, 0x2, {0x2, 0x200, 0x0, r3, 0x6, 'cpuset'}}, 0x24) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000080)) 10:24:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) getresuid(&(0x7f0000000040), 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) getegid() socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="17ae21c97b6584a206f4030e0d642891d91ed4eaa3932c423eb40535fb60f9a5dea7850f331f9cd672", 0x29}], 0x1, &(0x7f0000000500)=[{0x30, 0x113, 0x80, "2aecfbd03a8bc8f79117b9229e8ff21e7a6e38fbf19d3f570992c8b482f0"}, {0xc8, 0x100, 0x2, "b3fbda71c0a3325f5ad3d9ea7a0bce13cab00f4113d7fd60c7861eff754d3c931cd2746039938283d6ffc632b848b06d5de75eb08810565c40f6e2fedb2bb5a1463231c9ad25a548b7c7b9c53f0e6bea5196c405494b8e99a569a49780719f6361f1b296ecbfcdc0974859d986b677d925af6f26c40c5aac411d2e8c994ace8701b7c267e497cbf25dff217bcb79275dada4c09969963b12bc1e226bccd911ef6b1bbc4e85ef64e5cb810577c0cde14dd5"}, {0xb0, 0x108, 0x6, "5ecb00dbe9e44d0a447a013932e783ff5e1c49819579ec54806756cf16e8e8274f88f4fffb85b3acaa77d264a1e4f027fa7509092c608c35a603a1d51c2ee8658352575786a939f2499338b4bf995b3022c4e5ea67fb6bed334812dbad611dc35cb1c314e9df9fff9e48c80655420ef03049d4d43316544c3e5171a4b3dc81022550896b293d70fbc7cfd4fc779df75bed532e8dbeaed281a884ca7118bb71"}, {0xc8, 0x29, 0x8, "493bf2ebf5b6b23f062a2eff437907712ea0016ffab34fdcb03a232422df0e6be0047da900d9fc8055b5abc9de05162e5a618c416a35424809d1b1fe34bc7b12b68220ef9a078ef9110f36a0f8b1e419937fd5dacaa9ec0dca9117602435fedb738889fb1d5958fc95e157e6f1e10e1a0f70ae0fba7590b600204d5554a0e7a8b568d419dcb4ed144c9f39b3b18a1a2bb65469e780ab793eab7c3321db8256b10b8844db1031f772e87ae931a57d2496ddc0"}, {0x98, 0x108, 0x100000000, "7a2152e4e94dac73c6013f8352752bd9b7d8dd5ce731423ede2abb11cc654bcf76eacd44901f21157cf4c390e074bb06247db7cff816d7b0defdbc48e040ba8944424bb729cbeb945cabb96f21ce271b2be489479bba7214b6278c42bd4bd1b8da4005b124d86ec1e6072561a8810b808f977b3760bd9fe3d8d7ac0a57f1fc0fcf"}, {0x68, 0x29, 0x7, "75bc0295f9c1c45d451cc6593e9f0f6bb1729891ab48d1d860406d23248373c3416b3d10935bc2e8ce34ca184be5f2466369599db448f2b2da630c0edbf15b30287dfaf91439513ef17a9037fe1fb9ed5e8fa5cf6dd8a0"}], 0x370}}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x6}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)="64ce7fafc29e9716f3627673fdac75045304b56402e27822fad235d4c34ef63f7fd828d7842eaa42fdcc2269385433c43d2df280757a8ca360be088798ce4c1b1789aeae4fb8b66c8e927208d2a2e2a7afdcaca7bc8c5527658be8aef10d6fce59006e26ba73ad909cdec86244fffb6176d3a01ef62cb2a964015a71e63790908ae5f107485f6b77aefeb5fad02b053ac805c47db8538ec41864b639d19c8f5becc7ec66ab0bff5031117c0b7ea53999b0b612981c7771dacf3b21730033ade7668d1c1f", 0xc4}, {&(0x7f0000000a00)="657735a414cc3aa8f22c475eb3e2a3533f1ccd415024fa2de226b2b77427f0d45fe11598c6f831c824fe8757b4866c1ff0f504dd5692edcc24ecee3db2c058ddd52ac0ab8eac24a4caaa55af8dcad10f4625add7072afdcdc35aa7a49c0cb84a4c3bd78623e80fed2ff3306243023a8313297d779ba8e4d066e518af49318103d07e71f000fa8049354cbc06d2442c7932600231023455606d70bf5d27c90f703e7411ffaeb03091c24384da25fe97d095c1de1da68cff10c8c6c1a31608c47143c98616d665aa", 0xc7}, {&(0x7f0000000b00)="46eb1585ff", 0x5}, {&(0x7f0000001b80)="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", 0x1000}], 0x4, &(0x7f0000000b80)=[{0xc8, 0x104, 0xbe3, "d9d0a17ebb831909a8383d6543c257ce3a019c8cd4acc97cc2630ab2e1b0af69f52df935cb0307d8f6c248145131b22c8a64b185fff631016238e0becf57ba325ef3f5013cba3eb38d69c14f0d054d8e6c5f33046bd125b55076911783aa1a80f90dd75ec58a6774687612a95569b0b02c7b88c77e5772dcccfdbb70fbbd12be9b1766c40cff81f8c14f33147934ab348c61c2d3e171856bf183bf136e1b6a9685e80933afdf340b27f73c1460fc976bda"}, {0x88, 0x103, 0x5, "84bd318c8f80b2270bc75a26d05891fd43f47f376ea2b21a88560d4ac346e0fddf7a50cae31ab225a916d14e48f311a611d9d385c3cbadfbd4f731b8de3a4925924faa580a6b6956e38f809bc3a26bf35a2b9e9366eb8032ccd03271393c2a1e5735f43410e793e82817e1e0eed5b363d408e3c8"}, {0xa0, 0x118, 0x2, "4cef1157dc8e306c037ff9ea2c17bfe70aa0f6e1952a9054679a7d4502bcaa950a7e7a9e276eedb593f7475b680608d27a760a5807398764dd75245bbc65174f71b5aaa95becf0edc82948aa116fa577ce10dee951be49eb23947b467332fe0d9ad6e09e4b206fe63401792f8caf00f8277cdbebc9af6956be9128a9d8a6573bc5646b3cd240f1cd64f5fd"}, {0x48, 0x10a, 0x0, "8afb1c70a2490135f70cd143045a9004702e90581f5f259fd4b2622868ad69d0639519cc43f755f2ac1b6ecd4065d11abf"}, {0x10, 0x110, 0x2}, {0xa0, 0x1c, 0x9, "d7155b1dd2042c625915455a2a59870f443d119a2c02e1c93f0e258485e935a8c2e3c1414a34de1b2310d5b2cbdad007b639a9af68cc4ca2985ebe0c78f7cd79470360f6e556005f0b65e3d270c23df6f6a9ef511fcbf324e4c96bdc2d58bb08712eb55d13412862955cd9988506db5c8877559e4e283fdb13d2de578ce036a3841c3ce025d1368526c0"}], 0x2e8}}, {{&(0x7f0000000e80)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="762e1c56b3114d0fce4d6fb9d5ed826c6c562b74553d15fabfd212f1deeaef25128335af49822eb95b05577d8e3c39fd8f522b01d0ab0bc535223cd7c9d467e87d2300f3d789fed413aae1a16268859a8bcec197077547fff4688b83d720cdbc29a810584686d6ddd13065cd6107f87ac876a528117726a0f54339a5a951f35eef364343d42f123320cb955ebcba6b8d91bc16426597f95e59fa451b84291122a3ff93f74de7663ac9", 0xa9}], 0x1, &(0x7f0000002b80)=[{0x88, 0x105, 0x1, "99488f0129a5b67106de3dd77a36acd412b97cceb0353c838992df01fe5159734321a8c9aadce36a8df57ad4983855569bfadc7f4e6e766034d984d65e6ad3f230bbcae649890c54d98f20c66094d4525c137aee949807bf8dae86ec53771319289d8083f81915c1dd6f35959fd586c4e38d"}, {0x90, 0x85, 0x0, "227b813b5332e5f6c9aeab1f3191cc5b8d7fac03edb1fe28a1783dbea70e4baacb7de0399a77151e73a35a53fe81cc8cd034375ea2e98963b4611bea2dcbf2128e3e92a820d58bf5d2d23588d2e7d5cbc7e52988c85ef1a3750ce70c2a332e9835804b8000603167787c07d95b16b531df251fed6620a0d959c19f"}, {0x48, 0x101, 0x83d, "2e6e773b505697f019e287dfa3ba5bb1b5faaf187869d95b00ece2383d01b8e5defe664ad32a35dd6c7d8319d373a37ae499a436a4e2a1"}, {0x1010, 0x3a, 0x6, "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"}, {0x20, 0x22a, 0x80000000000000, "3c4494fed8474820e862e4a2"}], 0x1190}}], 0x3, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd94"}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x4) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000440)={0x0, 0xa4, "9d1eab557aaa93a5fc045799af9cdf4732984c7bbd67977f2440252847e557d58b77365b0ffeb56776e1048ae9f1d33d5ef7e24e16c512f6045124b7c5502dbd91133eae736432c1b138b446d286a549c8e7c3b6f1645e533ef89863cd1c658bdb4c442952d850231cbe9ec05e23060031b2085e501fb63d7791ada79db99759b4758daeac7f94d49f4bc555f6102243781d9340aa8b18490a2142988906b3a8fd257f89"}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x70ad) 10:24:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x9, 0x3, 0x747, 0x40, 0x0, 0x8000}) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/}eq\x02', 0x0, 0x10840) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0xe61}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\'\x00', 0x0, 0x10, 0x0, 0x0, 0x400000000000, 0x1, 0x100, 0x0, 0x5, 0x1}) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x11) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x9, {0x8, 0x1, 0x5, 0x9}}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1454, @loopback, 0xe73}, 0x1c) [ 133.275811][ T8152] device nr0 entered promiscuous mode [ 133.495491][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 133.495500][ T26] audit: type=1800 audit(1569061498.327:31): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name=68756765746C04 dev="sda1" ino=16584 res=0 10:24:58 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)) unshare(0x2000400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x23b) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@bcast, @null, 0x2, 0x56}) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0175499e4499d45820ff000000000000005e77ac5ea0ea765fbfd6dc000001250000a21275c3179d20a570e99712700c596402462c8cdfe5024aec71f0aad8365f018000000d9efd907d67111215cee2a4f9ffffffffff21e691dc7b513ea007166ae2a8776a3c7a8e1c5154000000000000000000001600000000798bcdf635fb710106cd3d57dcd8d8e4b4a7ee00100428ff452d8efa6dd2698cdfcbfa4a1d585215922ccfea9b830f034d7d1eaec9efe808241bb52452fa0166654f6aff20ed405c73773f7d8ab0b10297b3f09f53dcf3475d9a91b808031705882d3ed8425f8226dcb970187f50"], 0x7e) prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 10:24:58 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="07002010", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x584dea5b, 0x4}) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000), 0xc) rt_sigsuspend(&(0x7f0000000080), 0x8) 10:24:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810031008848000000008000000000000000000000000000000000008633ecdcc7361dfce11eeb857958574cca648b95d6a4a0e418981c0978ffcc38cb72682a7c379c68ea9d77591f2daab3e4371ee99eeb958e9d4529b0a223ff415212ea80ddce5074210b33256f16f0a9244e1a7165e1d7f360480b818af762435779ecf6b71b"], 0x0) 10:24:58 executing program 2: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffffffffffec6, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files']) [ 133.650918][ T8158] device nr0 entered promiscuous mode 10:24:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x8, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x176}]}) 10:24:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810031008848000000008000000000000000000000000000000000008633ecdcc7361dfce11eeb857958574cca648b95d6a4a0e418981c0978ffcc38cb72682a7c379c68ea9d77591f2daab3e4371ee99eeb958e9d4529b0a223ff415212ea80ddce5074210b33256f16f0a9244e1a7165e1d7f360480b818af762435779ecf6b71b"], 0x0) 10:24:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x5) close(r3) 10:24:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}, 0x2b5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) r2 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f0000000280)=0x14) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[], 0x208) r9 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r9, r8, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000980)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000a80)=0xe8) r11 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r11, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) getpeername(r11, &(0x7f0000000b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x80) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r13, &(0x7f0000000440)=ANY=[], 0x208) r14 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r14, r13, &(0x7f0000000000), 0x8080fffffffe) getpeername$packet(r13, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001680)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000017c0)=0xe8) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r19}]}, 0x28}}, 0x0) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket(0x11, 0x800000003, 0x0) bind(r21, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r22}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'rose0\x00', 0x0}) r24 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r24, &(0x7f0000000440)=ANY=[], 0x208) r25 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r25, r24, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(r24, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @local}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000001940)=0xe8) r27 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r27, &(0x7f0000000440)=ANY=[], 0x208) r28 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r28, r27, &(0x7f0000000000), 0x8080fffffffe) accept$packet(r27, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001ac0)={@local, 0x0}, &(0x7f0000001b00)=0x14) r31 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r31, &(0x7f0000000440)=ANY=[], 0x208) r32 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r32, r31, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_mreqn(r31, 0x0, 0x23, &(0x7f0000001b40)={@dev, @multicast1, 0x0}, &(0x7f0000001b80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @multicast2, @loopback}, &(0x7f0000001c00)=0xc) r35 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r35, &(0x7f0000000440)=ANY=[], 0x208) r36 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r36, r35, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_IP_XFRM_POLICY(r35, 0x0, 0x11, &(0x7f0000001d00)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001e00)=0x22) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket(0x11, 0x800000003, 0x0) bind(r39, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r39, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r40}]}, 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @multicast1, @multicast2}, &(0x7f0000001e80)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001f00)={@empty, @remote, 0x0}, &(0x7f0000001f40)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002500)={&(0x7f0000001f80)={0x550, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x140, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8f8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x50, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x940, 0x10001, 0x10000, 0x6}, {0x2, 0x7f, 0x4, 0x8}, {0x101, 0x4, 0x5}]}}}]}}, {{0x8}, {0x78, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r26}}}]}}, {{0x8, 0x1, r29}, {0xc8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}]}}, {{0x8, 0x1, r33}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r34}}}]}}, {{0x8, 0x1, r37}, {0x13c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r41}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r42}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x11}, 0x8000) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e602001fde54fe46b904832c8fa873d411962ff4c9801c", 0x18) 10:25:00 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080007000400ff7e", 0x24}], 0x1}, 0x0) 10:25:00 executing program 1: syz_open_dev$swradio(&(0x7f0000000080)='io#\x00', 0x0, 0x2) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x208) r1 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_QUERYMENU(r0, 0xc058560f, &(0x7f0000000240)={0x0, 0x0, @name="8ff97707005e747432e092700d9d21781422140660eb1613b4e006d2814e1a80"}) 10:25:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpu\xccwt.effecti\x94e_c\x06\n\xaf\xbe', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x4) 10:25:00 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='nr0\x00', 0x100000162) r2 = dup2(r0, r0) sendmsg$tipc(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="ac", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 136.041280][ T8212] binder: 8210:8212 unknown command 255 [ 136.075367][ T8212] binder: 8210:8212 ioctl c0306201 20000140 returned -22 [ 136.214642][ T8212] binder: 8210:8212 unknown command 0 [ 136.220135][ T8212] binder: 8210:8212 ioctl c0306201 20000140 returned -22 10:25:01 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) read$alg(r0, 0x0, 0xec6017db39071c7b) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3c38026c, 0x64a00) 10:25:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x800000030, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r1 = dup3(0xffffffffffffffff, r0, 0x100000) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x6, 0x1, [0x4]}, &(0x7f0000000100)=0xa) 10:25:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) read(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x80200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10:25:01 executing program 2: syz_init_net_socket$ax25(0x3, 0x5, 0x8) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000000)=0x3e76, 0x4) 10:25:01 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080007000400ff7e", 0x24}], 0x1}, 0x0) 10:25:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4040ae79, &(0x7f0000000040)) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYPTR, @ANYRESHEX, @ANYBLOB="5693c00d904c326be47ace168300e15ff1b7a592f3a286ab038c1249966d2831ff7dcfe5db8940c7a9ef93692ee02c855864e4eed52f2ef2120127bc3ec1b508395f15c1d85e58221b6672b056f5607f3cc4b554a578386060914a09e6f1678d2b7fca52bdde9a19cf9736cfa9e6341de186bf37571c2552061498a913072eebd398206863448846f69674571be7e39d5426a3c6e00e4711d2165aa8dc1b3f1376a38ae41ec3946e1177b330828ee4a78db273a0025f50b85a69e4b79dadabd41c0e874d981d4cb474b184236b53790c6dd10df95de42ab732fe747e6332807cac0262dadcd629e2a8cdc5017ee6b5485aa0505d80", @ANYBLOB="2dded129bd2d60d26b8850e187262f7ca419a511ae496926243e0760dcea00a71f28d15498b6a82fc6d037d3564502e2c2c676350b01b9adf76c45dad76ffd09b1649d3a7ddf44a800b2e35bb09e2327e315934417ad4890d45bc160067a482cf2c0f4", @ANYRESHEX, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES16=r4], 0x2dd) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000001c0)) 10:25:01 executing program 2: getdents64(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_mr_cache\x00') 10:25:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x800000030, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r1 = dup3(0xffffffffffffffff, r0, 0x100000) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x6, 0x1, [0x4]}, &(0x7f0000000100)=0xa) 10:25:01 executing program 1: fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) io_setup(0x8, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x3) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x102, "1e034a3b3cf1dee74c285eb491cd23d20ab73d5dbed0f433b0c20426c927dfc9", 0x401, 0x1, 0x1ff, 0xffffffffffff7450, 0xffff, 0x84, 0x3, 0x4, [0x2, 0x10001, 0x7ff, 0x7]}) fcntl$addseals(r1, 0x409, 0x6) io_submit(r0, 0x1, &(0x7f0000001240)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='q', 0x1}]) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9076, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 136.926721][ T8238] binder: 8236:8238 unknown command 255 [ 136.932327][ T8238] binder: 8236:8238 ioctl c0306201 20000140 returned -22 10:25:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) read(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x80200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10:25:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) read(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x80200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r1, r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10:25:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x0, 0x80) semctl$GETNCNT(0x0, 0x0, 0x10, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x88400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 10:25:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000000)={0x3, 0x0, [{}, {}, {}]}) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x3a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 10:25:01 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080007000400ff7e", 0x24}], 0x1}, 0x0) 10:25:02 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x208) r1 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0x8080fffffffe) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x9c, "f03098194b7b01fe906feb8bd35b958ac7582efbe7a7d84401deab4592219d3f85cc390b57761277d354643b8c193efb144f306285fe4428fb4fcccc9f8ce1cca07fdb0a89d82a910ad231029d3c8fd8d0b4ca9a2e08291b1f307845204ee1bcccd514c4ddeddb8a27be33ede6244427d5a67b5cd9eb48d3715df729fdb23490db92a423c6d3478c76dcf2d6bf893a7463aaf56f3a1afe662ca78130"}, &(0x7f0000000100)=0xc0) unshare(0x2000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0), 0xaa9249830a223bcd) 10:25:02 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() r4 = gettid() sendmmsg$unix(r2, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="00000071c53584c4cabf09000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}], 0xfd, 0x0) 10:25:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9b30800000f32748d67660f73dd0666b9800000c00f326635008000000f30f0828709000066b8090000000f23d00f21f866352000000a0f23f80fc72b0f01d166b87dad00000f23c80f21f86635080020000f23f8260fc731", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xaa}}}, &(0x7f0000000100)=0x84) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @null, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf53b3f57be45df36}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x25c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48354dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf1fe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2a12}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @mcast2, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}}}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff5ac}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:25:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@deltaction={0x18, 0x30, 0xffffff1f, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 137.309200][ T8271] binder: 8270:8271 unknown command 255 [ 137.314865][ T8271] binder: 8270:8271 ioctl c0306201 20000140 returned -22 [ 137.325180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 137.331006][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:25:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) r2 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000016, 0x50, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10:25:02 executing program 4: r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc0045878, 0x0) 10:25:02 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080007000400ff7e", 0x24}], 0x1}, 0x0) 10:25:02 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x40031, r0, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x4, 0x100132, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, &(0x7f0000000080)) 10:25:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02030000050000000000000000000000000000000002000000e000000100"/40], 0x28}, 0x1, 0x2000000000000000}, 0x0) 10:25:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='s', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0x1c1) setreuid(0x0, r3) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="544829cecbecd82fa2fcccb799148fc625ba92beb912a472ab43ba361215121340b9d69d4d7698e3749abd4530c555d180c2ae4edf6df04a1f4d39344e6d3ffbaa2c92e2d9c85e5d88c756e774915d1bbc3b57a47845203ede055d2b", 0x5c}, {&(0x7f0000000180)="380e0f9051c97224e4267e0ad51d22d8d0334164e8492f67ef5c5916e423c2603cf2e7133cf666913e68e013c062bd7fec113e19f2a30f77ac330e211560f06ca3a7b57589031201633f1009579d3a7f55a8c1e80b871669759c6b9c04781a35fe2aef", 0x63}, {&(0x7f0000000200)="f1485ca8a7a7095ee1f814ef421b646a4d", 0x11}], 0x3, 0x0, 0x0, 0x40}, 0x86cbbcff4663143c) fstat(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r5) getgroups(0x0, &(0x7f00000000c0)) fchown(r1, r3, 0x0) 10:25:02 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xc6920, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x201, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'tunl0\x00', r7}) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5bedd91fa5735d9}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)=@gettfilter={0x4c, 0x2e, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, r8, {0x10, 0x10}, {0xc, 0x5}, {0x10, 0x2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x100) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800007a1be285771da8b7000000000000000000", @ANYRES32=r11, @ANYBLOB="000000001f5f0000280012000c0001007665746800000000180002201400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0x4, 0x0, 0x0, 0x3}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000f2290001efe335bc0162268a009e990100", @ANYRES32=r11], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r12, 0x4010aeab, &(0x7f0000000240)={0x4, 0x1}) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r13, &(0x7f0000000440)=ANY=[], 0x208) r14 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r14, r13, &(0x7f0000000000), 0x8080fffffffe) ioctl$EVIOCGSND(r13, 0x8040451a, &(0x7f00000002c0)=""/108) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:25:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10001, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r2, 0x10001, 0x10, 0xff, 0x88}, &(0x7f0000000280)=0x18) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000000c0)={0xe, 0x0, 0x1bee, 0x40, 0xaa, "8947116407cfb73c500fc65d916a948136d81ed27fd232b515ae435db4f4e8340f824237035953aa72e1f15ee3e2635751450e067e174837f5aaedc321a1a068d0bfc5c9e82d6fcf8215e29a421b51e311b1ed504a82317ad89574f6e588bf94e8fca00aa612287c9a7c47834b55f21228f4062e472449b8bf721c1a47596dc4e69b61ee5fbfcadfab7153f3db094b65512a3d01910921a4ef2165eca96c0406ffb06f560bd9130ae597"}, 0xb6) [ 137.743280][ T8313] binder: 8311:8313 unknown command 255 [ 137.771434][ T8313] binder: 8311:8313 ioctl c0306201 20000140 returned -22 10:25:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x0) 10:25:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000033000e01000000000000000002000000ffd38d9b0c0001000400000000000000"], 0x24}}, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x208) r2 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r2, r1, &(0x7f0000000000), 0x8080fffffffe) read$alg(r1, &(0x7f00000000c0)=""/194, 0xc2) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x4) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000380)=0x18, 0x4) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r5, 0x54cb5e2fa79b5ab0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7bfbe098}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x88}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40400) 10:25:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/68, 0x200}, {&(0x7f0000000100)=""/120, 0xfffffffffffffece}, {&(0x7f0000000180)=""/205, 0xcd}], 0x3, 0x0) 10:25:02 executing program 2: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2276, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, @scatter={0xfea1, 0xc1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc070d3f500000000}) 10:25:02 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) 10:25:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000000)={0x0, {0x1ff, 0x1}}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 10:25:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400a83978632cb4f1000052001f00003ba70045ec642004006e4c9b5f03000000fb984baaf6b3fcc1e3170534af0ae541d86e5cebb08a6fc9454d9bf7959c078a6211c7ec8a19c5c1a5d0aded1b0859b57188b8c6420d938a01000000000000000000000000000049179a977c2a567d04b24bbe4418d66bc08fcf336ae02bef4290fb9559ea67fd73771bfed56bd6328ae485899971ab1528b27cb315257547d29e7a81fd941b6632bd700b4ee681dfbe8a5bbb435f913596f7284c8d9f00", 0x5) 10:25:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0xf, 0x0, 0x0) socket(0x1, 0x80000, 0x80) 10:25:02 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x82, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 10:25:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 138.122651][ T8353] binder: 8352:8353 unknown command 255 [ 138.179413][ T8353] binder: 8352:8353 ioctl c0306201 20000140 returned -22 [ 138.219170][ T8369] [ 138.221534][ T8369] ===================================================== [ 138.228455][ T8369] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 138.235959][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 138.235986][ T8369] 5.3.0+ #0 Not tainted [ 138.244311][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 138.247206][ T8369] ----------------------------------------------------- [ 138.247216][ T8369] syz-executor.0/8369 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 138.247219][ T8369] ffff8880910380a8 (&fiq->waitq){+.+.}, at: io_submit_one+0x108c/0x1970 [ 138.247242][ T8369] [ 138.247242][ T8369] and this task is already holding: [ 138.247245][ T8369] ffff888054d85b98 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0x1057/0x1970 [ 138.297353][ T8369] which would create a new lock dependency: [ 138.303246][ T8369] (&(&ctx->ctx_lock)->rlock){..-.} -> (&fiq->waitq){+.+.} [ 138.310461][ T8369] [ 138.310461][ T8369] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 138.319901][ T8369] (&(&ctx->ctx_lock)->rlock){..-.} [ 138.319908][ T8369] [ 138.319908][ T8369] ... which became SOFTIRQ-irq-safe at: [ 138.328205][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 138.332815][ T8369] lock_acquire+0x158/0x250 [ 138.344716][ T8369] _raw_spin_lock_irq+0x6a/0x80 [ 138.349656][ T8369] free_ioctx_users+0x33/0x1d0 [ 138.354498][ T8369] percpu_ref_put+0x1c6/0x1d0 [ 138.359257][ T8369] percpu_ref_switch_to_atomic_rcu+0x344/0x420 [ 138.365311][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 138.365489][ T8369] rcu_core+0x843/0x1050 [ 138.380015][ T8369] rcu_core_si+0x9/0x10 [ 138.384244][ T8369] __do_softirq+0x333/0x7c4 [ 138.388823][ T8369] irq_exit+0x227/0x230 [ 138.393052][ T8369] smp_apic_timer_interrupt+0x113/0x280 [ 138.398669][ T8369] apic_timer_interrupt+0xf/0x20 [ 138.403681][ T8369] filemap_map_pages+0x7a4/0xe50 [ 138.408694][ T8369] handle_mm_fault+0x34cb/0x6010 [ 138.413888][ T8369] do_user_addr_fault+0x589/0xaf0 [ 138.418997][ T8369] __do_page_fault+0xd3/0x1f0 [ 138.423751][ T8369] do_page_fault+0x99/0xb0 [ 138.428245][ T8369] page_fault+0x39/0x40 [ 138.432469][ T8369] [ 138.432469][ T8369] to a SOFTIRQ-irq-unsafe lock: [ 138.439470][ T8369] (&fiq->waitq){+.+.} [ 138.439477][ T8369] [ 138.439477][ T8369] ... which became SOFTIRQ-irq-unsafe at: [ 138.451390][ T8369] ... [ 138.451404][ T8369] lock_acquire+0x158/0x250 [ 138.458556][ T8369] _raw_spin_lock+0x2d/0x40 [ 138.463137][ T8369] fuse_request_queue_background+0x673/0xc60 [ 138.469198][ T8369] fuse_request_send_background+0x56/0x100 [ 138.475077][ T8369] cuse_channel_open+0x485/0x660 [ 138.480100][ T8369] misc_open+0x3ef/0x440 [ 138.484418][ T8369] chrdev_open+0x509/0x590 [ 138.488906][ T8369] do_dentry_open+0x73b/0xf90 [ 138.493655][ T8369] vfs_open+0x73/0x80 [ 138.497705][ T8369] path_openat+0x1397/0x4460 [ 138.502367][ T8369] do_filp_open+0x192/0x3d0 [ 138.506941][ T8369] do_sys_open+0x29f/0x560 [ 138.511430][ T8369] __x64_sys_openat+0xa2/0xb0 [ 138.516185][ T8369] do_syscall_64+0xf7/0x1c0 [ 138.520763][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 138.526806][ T8369] [ 138.526806][ T8369] other info that might help us debug this: [ 138.526806][ T8369] [ 138.537018][ T8369] Possible interrupt unsafe locking scenario: [ 138.537018][ T8369] [ 138.545421][ T8369] CPU0 CPU1 [ 138.550771][ T8369] ---- ---- [ 138.556137][ T8369] lock(&fiq->waitq); [ 138.560192][ T8369] local_irq_disable(); [ 138.566939][ T8369] lock(&(&ctx->ctx_lock)->rlock); [ 138.574646][ T8369] lock(&fiq->waitq); [ 138.581222][ T8369] [ 138.584664][ T8369] lock(&(&ctx->ctx_lock)->rlock); [ 138.590041][ T8369] [ 138.590041][ T8369] *** DEADLOCK *** [ 138.590041][ T8369] [ 138.598183][ T8369] 1 lock held by syz-executor.0/8369: [ 138.603538][ T8369] #0: ffff888054d85b98 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0x1057/0x1970 [ 138.613631][ T8369] [ 138.613631][ T8369] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 138.624031][ T8369] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 138.629569][ T8369] IN-SOFTIRQ-W at: [ 138.633547][ T8369] lock_acquire+0x158/0x250 [ 138.641773][ T8369] _raw_spin_lock_irq+0x6a/0x80 [ 138.648400][ T8369] free_ioctx_users+0x33/0x1d0 [ 138.654805][ T8369] percpu_ref_put+0x1c6/0x1d0 [ 138.661119][ T8369] percpu_ref_switch_to_atomic_rcu+0x344/0x420 [ 138.668920][ T8369] rcu_core+0x843/0x1050 [ 138.674800][ T8369] rcu_core_si+0x9/0x10 [ 138.680789][ T8369] __do_softirq+0x333/0x7c4 [ 138.686932][ T8369] irq_exit+0x227/0x230 [ 138.692729][ T8369] smp_apic_timer_interrupt+0x113/0x280 [ 138.699916][ T8369] apic_timer_interrupt+0xf/0x20 [ 138.706495][ T8369] filemap_map_pages+0x7a4/0xe50 [ 138.713073][ T8369] handle_mm_fault+0x34cb/0x6010 [ 138.719649][ T8369] do_user_addr_fault+0x589/0xaf0 [ 138.726312][ T8369] __do_page_fault+0xd3/0x1f0 [ 138.732622][ T8369] do_page_fault+0x99/0xb0 [ 138.738679][ T8369] page_fault+0x39/0x40 [ 138.744467][ T8369] INITIAL USE at: [ 138.748353][ T8369] lock_acquire+0x158/0x250 [ 138.754407][ T8369] _raw_spin_lock_irq+0x6a/0x80 [ 138.760816][ T8369] free_ioctx_users+0x33/0x1d0 [ 138.767150][ T8369] percpu_ref_put+0x1c6/0x1d0 [ 138.773375][ T8369] percpu_ref_switch_to_atomic_rcu+0x344/0x420 [ 138.781080][ T8369] rcu_core+0x843/0x1050 [ 138.786875][ T8369] rcu_core_si+0x9/0x10 [ 138.792579][ T8369] __do_softirq+0x333/0x7c4 [ 138.798639][ T8369] irq_exit+0x227/0x230 [ 138.804344][ T8369] smp_apic_timer_interrupt+0x113/0x280 [ 138.811440][ T8369] apic_timer_interrupt+0xf/0x20 [ 138.817954][ T8369] filemap_map_pages+0x7a4/0xe50 [ 138.824442][ T8369] handle_mm_fault+0x34cb/0x6010 [ 138.830933][ T8369] do_user_addr_fault+0x589/0xaf0 [ 138.837510][ T8369] __do_page_fault+0xd3/0x1f0 [ 138.843738][ T8369] do_page_fault+0x99/0xb0 [ 138.849704][ T8369] page_fault+0x39/0x40 [ 138.855496][ T8369] } [ 138.857991][ T8369] ... key at: [] ioctx_alloc.__key+0x0/0x10 [ 138.865947][ T8369] ... acquired at: [ 138.869747][ T8369] lock_acquire+0x158/0x250 [ 138.874423][ T8369] _raw_spin_lock+0x2d/0x40 [ 138.879085][ T8369] io_submit_one+0x108c/0x1970 [ 138.884010][ T8369] __se_sys_io_submit+0x12f/0x240 [ 138.889212][ T8369] __x64_sys_io_submit+0x7b/0x90 [ 138.894315][ T8369] do_syscall_64+0xf7/0x1c0 [ 138.898981][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 138.905706][ T8369] [ 138.908248][ T8369] [ 138.908248][ T8369] the dependencies between the lock to be acquired [ 138.908252][ T8369] and SOFTIRQ-irq-unsafe lock: [ 138.921783][ T8369] -> (&fiq->waitq){+.+.} { [ 138.926195][ T8369] HARDIRQ-ON-W at: [ 138.930171][ T8369] lock_acquire+0x158/0x250 [ 138.936309][ T8369] _raw_spin_lock+0x2d/0x40 [ 138.942450][ T8369] fuse_request_queue_background+0x673/0xc60 [ 138.950090][ T8369] fuse_request_send_background+0x56/0x100 [ 138.957535][ T8369] cuse_channel_open+0x485/0x660 [ 138.964106][ T8369] misc_open+0x3ef/0x440 [ 138.969986][ T8369] chrdev_open+0x509/0x590 [ 138.976044][ T8369] do_dentry_open+0x73b/0xf90 [ 138.982354][ T8369] vfs_open+0x73/0x80 [ 138.987971][ T8369] path_openat+0x1397/0x4460 [ 138.994201][ T8369] do_filp_open+0x192/0x3d0 [ 139.000343][ T8369] do_sys_open+0x29f/0x560 [ 139.006395][ T8369] __x64_sys_openat+0xa2/0xb0 [ 139.012708][ T8369] do_syscall_64+0xf7/0x1c0 [ 139.018849][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 139.026370][ T8369] SOFTIRQ-ON-W at: [ 139.030344][ T8369] lock_acquire+0x158/0x250 [ 139.036494][ T8369] _raw_spin_lock+0x2d/0x40 [ 139.042648][ T8369] fuse_request_queue_background+0x673/0xc60 [ 139.050346][ T8369] fuse_request_send_background+0x56/0x100 [ 139.057775][ T8369] cuse_channel_open+0x485/0x660 [ 139.064333][ T8369] misc_open+0x3ef/0x440 [ 139.070198][ T8369] chrdev_open+0x509/0x590 [ 139.076235][ T8369] do_dentry_open+0x73b/0xf90 [ 139.082552][ T8369] vfs_open+0x73/0x80 [ 139.088153][ T8369] path_openat+0x1397/0x4460 [ 139.094450][ T8369] do_filp_open+0x192/0x3d0 [ 139.100576][ T8369] do_sys_open+0x29f/0x560 [ 139.106615][ T8369] __x64_sys_openat+0xa2/0xb0 [ 139.112924][ T8369] do_syscall_64+0xf7/0x1c0 [ 139.119484][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 139.126998][ T8369] INITIAL USE at: [ 139.130892][ T8369] lock_acquire+0x158/0x250 [ 139.136930][ T8369] _raw_spin_lock+0x2d/0x40 [ 139.142972][ T8369] fuse_request_queue_background+0x673/0xc60 [ 139.150498][ T8369] fuse_request_send_background+0x56/0x100 [ 139.157839][ T8369] cuse_channel_open+0x485/0x660 [ 139.164412][ T8369] misc_open+0x3ef/0x440 [ 139.170191][ T8369] chrdev_open+0x509/0x590 [ 139.176154][ T8369] do_dentry_open+0x73b/0xf90 [ 139.182450][ T8369] vfs_open+0x73/0x80 [ 139.187966][ T8369] path_openat+0x1397/0x4460 [ 139.194099][ T8369] do_filp_open+0x192/0x3d0 [ 139.200226][ T8369] do_sys_open+0x29f/0x560 [ 139.206185][ T8369] __x64_sys_openat+0xa2/0xb0 [ 139.212402][ T8369] do_syscall_64+0xf7/0x1c0 [ 139.218455][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 139.226172][ T8369] } [ 139.228661][ T8369] ... key at: [] fuse_iqueue_init.__key+0x0/0x10 [ 139.237063][ T8369] ... acquired at: [ 139.240960][ T8369] lock_acquire+0x158/0x250 [ 139.245610][ T8369] _raw_spin_lock+0x2d/0x40 [ 139.250260][ T8369] io_submit_one+0x108c/0x1970 [ 139.255171][ T8369] __se_sys_io_submit+0x12f/0x240 [ 139.260355][ T8369] __x64_sys_io_submit+0x7b/0x90 [ 139.265439][ T8369] do_syscall_64+0xf7/0x1c0 [ 139.270090][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 139.276138][ T8369] [ 139.278451][ T8369] [ 139.278451][ T8369] stack backtrace: [ 139.284328][ T8369] CPU: 0 PID: 8369 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 139.291764][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.301804][ T8369] Call Trace: [ 139.305081][ T8369] dump_stack+0x1d8/0x2f8 [ 139.309400][ T8369] validate_chain+0x7be6/0x7c00 [ 139.314235][ T8369] ? mark_lock+0x107/0x1650 [ 139.318711][ T8369] ? register_lock_class+0x99/0xea0 [ 139.323899][ T8369] __lock_acquire+0xc75/0x1be0 [ 139.328647][ T8369] ? fuse_dev_poll+0x1cf/0x200 [ 139.333386][ T8369] ? trace_lock_acquire+0x159/0x1d0 [ 139.338560][ T8369] lock_acquire+0x158/0x250 [ 139.343036][ T8369] ? io_submit_one+0x108c/0x1970 [ 139.347947][ T8369] _raw_spin_lock+0x2d/0x40 [ 139.352421][ T8369] ? io_submit_one+0x108c/0x1970 [ 139.357333][ T8369] io_submit_one+0x108c/0x1970 [ 139.362075][ T8369] ? aio_poll_complete_work+0x490/0x490 [ 139.367597][ T8369] __se_sys_io_submit+0x12f/0x240 [ 139.372657][ T8369] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 139.378200][ T8369] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 139.383951][ T8369] __x64_sys_io_submit+0x7b/0x90 [ 139.388881][ T8369] do_syscall_64+0xf7/0x1c0 [ 139.393364][ T8369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 139.399229][ T8369] RIP: 0033:0x459a09 [ 139.403098][ T8369] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.422691][ T8369] RSP: 002b:00007f70febd0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 139.431079][ T8369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 139.439053][ T8369] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 00007f70febae000 [ 139.446999][ T8369] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 139.454946][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f70febd16d4 [ 139.462892][ T8369] R13: 00000000004c0dea R14: 00000000004d3f98 R15: 00000000ffffffff 10:25:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x3f3ba2ac98dcc178, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000280)={0x20, 0x6, 0x0, 0x1, 0x1, 0xc, 0xa, "5e7bad8e7b6d27902cf08d0b2895d752653f6594", "02bcb8f2c9378d25c6fe816120bd847d233e2415"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x31, &(0x7f0000000000)={@mcast1}, &(0x7f00000000c0)=0x14) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000100)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) fcntl$addseals(r2, 0x409, 0x2) fdatasync(0xffffffffffffffff) 10:25:04 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 139.504794][ T8365] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 139.512835][ T8365] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) 10:25:04 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffe46) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:04 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 139.573225][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 139.586436][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 139.596776][ T26] audit: type=1800 audit(1569061504.417:32): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16612 res=0 10:25:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="17da7fa66f038a381fa17bd3adbffea7b09c1f3bbeae4c98c41fb8a6054bc2bb3cf4cbdabad0ae512e526162eca48befb430f803f4f7c3579db77579c89a77f60518011a39de46f9d5fadaf250ac748e0595", @ANYRES16, @ANYRES32=r2], @ANYRES32=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="5adb247b4d86f4337aead56e4d0f6a268cd93df967852835b7b8e75bb7d34b27de8e658c6d84f920de4ee411ef7ca1de9a805f2cc0bb7ef00d4be1e3a05affc9439c4022ca2c76b3ef10cefa01a4dcc6d24fbbcb33ca215c6fba9babd10b016e7cbbbedf85ce884d9eefc7d02e6fe8361b30540daf50b57c5e7d"], @ANYBLOB="3dce7f4161586041cec1f00270b4ec37471486f875771dc4882cd13c013ee7dee790b092d999af14280c86440236ba67a44a8d6d1d3316bcff622ef232a754da17d95805bdf7ddedba620f2f138d116a1697db69144330db8143cca9af0865682984c33a3c12d14c5cd874a9bcb05364ed68e6d7", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0ef9cb55174f12e6c4e5e370e9bcf5bd623c128641491ebf6a41d16561295e63e7f25b3c9eef12b40960fece384425c4875ca00123bc24b02e221d5701feb213616354a2ac24b4c7", @ANYRES64=0x0], @ANYRES32], 0x8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4084) [ 139.664891][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env 10:25:04 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffe46) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 139.712352][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 139.716196][ T8381] binder: 8380:8381 unknown command 255 10:25:04 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="17da7fa66f038a381fa17bd3adbffea7b09c1f3bbeae4c98c41fb8a6054bc2bb3cf4cbdabad0ae512e526162eca48befb430f803f4f7c3579db77579c89a77f60518011a39de46f9d5fadaf250ac748e0595", @ANYRES16, @ANYRES32=r2], @ANYRES32=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="5adb247b4d86f4337aead56e4d0f6a268cd93df967852835b7b8e75bb7d34b27de8e658c6d84f920de4ee411ef7ca1de9a805f2cc0bb7ef00d4be1e3a05affc9439c4022ca2c76b3ef10cefa01a4dcc6d24fbbcb33ca215c6fba9babd10b016e7cbbbedf85ce884d9eefc7d02e6fe8361b30540daf50b57c5e7d"], @ANYBLOB="3dce7f4161586041cec1f00270b4ec37471486f875771dc4882cd13c013ee7dee790b092d999af14280c86440236ba67a44a8d6d1d3316bcff622ef232a754da17d95805bdf7ddedba620f2f138d116a1697db69144330db8143cca9af0865682984c33a3c12d14c5cd874a9bcb05364ed68e6d7", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0ef9cb55174f12e6c4e5e370e9bcf5bd623c128641491ebf6a41d16561295e63e7f25b3c9eef12b40960fece384425c4875ca00123bc24b02e221d5701feb213616354a2ac24b4c7", @ANYRES64=0x0], @ANYRES32], 0x8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4084) [ 139.764103][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 139.791595][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 139.797634][ T8381] binder: 8380:8381 ioctl c0306201 20000140 returned -22 10:25:04 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffe46) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 139.854904][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 139.868752][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:25:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 139.911565][ T26] audit: type=1800 audit(1569061504.737:33): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16611 res=0 [ 139.915511][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 140.002946][ T8365] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 140.025806][ T8409] binder: 8408:8409 unknown command 255 [ 140.041800][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 140.053659][ T8409] binder: 8408:8409 ioctl c0306201 20000140 returned -22 [ 140.074916][ T8365] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 140.088173][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 140.100461][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 140.113841][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 140.121200][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 140.150513][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 140.159293][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 140.181925][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 140.191485][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 140.215740][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 140.222915][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 140.236071][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 140.243223][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 140.256810][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 140.263956][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:25:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:25:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffe46) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:05 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:05 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="17da7fa66f038a381fa17bd3adbffea7b09c1f3bbeae4c98c41fb8a6054bc2bb3cf4cbdabad0ae512e526162eca48befb430f803f4f7c3579db77579c89a77f60518011a39de46f9d5fadaf250ac748e0595", @ANYRES16, @ANYRES32=r2], @ANYRES32=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="5adb247b4d86f4337aead56e4d0f6a268cd93df967852835b7b8e75bb7d34b27de8e658c6d84f920de4ee411ef7ca1de9a805f2cc0bb7ef00d4be1e3a05affc9439c4022ca2c76b3ef10cefa01a4dcc6d24fbbcb33ca215c6fba9babd10b016e7cbbbedf85ce884d9eefc7d02e6fe8361b30540daf50b57c5e7d"], @ANYBLOB="3dce7f4161586041cec1f00270b4ec37471486f875771dc4882cd13c013ee7dee790b092d999af14280c86440236ba67a44a8d6d1d3316bcff622ef232a754da17d95805bdf7ddedba620f2f138d116a1697db69144330db8143cca9af0865682984c33a3c12d14c5cd874a9bcb05364ed68e6d7", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0ef9cb55174f12e6c4e5e370e9bcf5bd623c128641491ebf6a41d16561295e63e7f25b3c9eef12b40960fece384425c4875ca00123bc24b02e221d5701feb213616354a2ac24b4c7", @ANYRES64=0x0], @ANYRES32], 0x8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4084) 10:25:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 140.569941][ T3890] kobject: 'loop2' (00000000c612d629): kobject_uevent_env [ 140.590770][ T26] audit: type=1800 audit(1569061505.417:34): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16646 res=0 10:25:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 140.623679][ T3890] kobject: 'loop2' (00000000c612d629): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 140.656041][ T8432] binder: 8429:8432 unknown command 255 10:25:05 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0x208) r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="17da7fa66f038a381fa17bd3adbffea7b09c1f3bbeae4c98c41fb8a6054bc2bb3cf4cbdabad0ae512e526162eca48befb430f803f4f7c3579db77579c89a77f60518011a39de46f9d5fadaf250ac748e0595", @ANYRES16, @ANYRES32=r2], @ANYRES32=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="5adb247b4d86f4337aead56e4d0f6a268cd93df967852835b7b8e75bb7d34b27de8e658c6d84f920de4ee411ef7ca1de9a805f2cc0bb7ef00d4be1e3a05affc9439c4022ca2c76b3ef10cefa01a4dcc6d24fbbcb33ca215c6fba9babd10b016e7cbbbedf85ce884d9eefc7d02e6fe8361b30540daf50b57c5e7d"], @ANYBLOB="3dce7f4161586041cec1f00270b4ec37471486f875771dc4882cd13c013ee7dee790b092d999af14280c86440236ba67a44a8d6d1d3316bcff622ef232a754da17d95805bdf7ddedba620f2f138d116a1697db69144330db8143cca9af0865682984c33a3c12d14c5cd874a9bcb05364ed68e6d7", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0ef9cb55174f12e6c4e5e370e9bcf5bd623c128641491ebf6a41d16561295e63e7f25b3c9eef12b40960fece384425c4875ca00123bc24b02e221d5701feb213616354a2ac24b4c7", @ANYRES64=0x0], @ANYRES32], 0x8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4084) [ 140.683008][ T8432] binder: 8429:8432 ioctl c0306201 20000140 returned -22 [ 140.712815][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env 10:25:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 140.748579][ T26] audit: type=1800 audit(1569061505.577:35): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16589 res=0 [ 140.780886][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:25:05 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 140.838385][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 140.874569][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 140.907928][ T8446] binder: 8444:8446 unknown command 255 [ 140.913581][ T8446] binder: 8444:8446 ioctl c0306201 20000140 returned -22 [ 140.928048][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 140.947313][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 140.970597][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 140.978711][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 140.993682][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 141.007338][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 141.034845][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 141.082161][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 141.099160][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 141.107276][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 141.118282][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 141.125459][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 141.325504][ T8434] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 141.332747][ T8434] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:25:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:06 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) sendmmsg$inet_sctp(r3, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) [ 141.547699][ T8434] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 141.554705][ T8434] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:06 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) 10:25:06 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 141.629122][ T26] audit: type=1800 audit(1569061506.457:36): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16668 res=0 [ 141.633521][ T3890] kobject: 'loop2' (00000000c612d629): kobject_uevent_env 10:25:06 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000080)={0x8, &(0x7f00000004c0)=""/239, &(0x7f0000001940)=[{0x100000000, 0x90, 0x6, &(0x7f0000000340)=""/144}, {0x6, 0x0, 0x800, 0xfffffffffffffffd}, {0x100000000, 0x1000, 0x8, &(0x7f00000005c0)=""/4096}, {0x800, 0x83, 0xffffffffffffffe1, &(0x7f00000015c0)=""/131}, {0x3, 0xc7, 0x2, &(0x7f0000001680)=""/199}, {0x3ff, 0x48, 0x80, &(0x7f0000000100)=""/72}, {0x80000001, 0xf8, 0x5, &(0x7f0000001780)=""/248}, {0xc5, 0xb3, 0xfffffffffffffffe, &(0x7f0000001880)=""/179}]}) [ 141.686663][ T3890] kobject: 'loop2' (00000000c612d629): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 141.707664][ T8466] binder: 8457:8466 unknown command 255 [ 141.713249][ T8466] binder: 8457:8466 ioctl c0306201 20000140 returned -22 10:25:06 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 141.741304][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 141.752290][ T26] audit: type=1800 audit(1569061506.577:37): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16660 res=0 10:25:06 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) sendfile(r1, r0, 0x0, 0xffffffff) [ 141.791808][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:25:06 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 141.842137][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 141.847987][ T26] audit: type=1800 audit(1569061506.677:38): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16671 res=0 [ 141.871072][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 141.929473][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 141.944320][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 141.957303][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 141.964461][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 141.982268][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 141.989938][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 142.000944][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 142.008223][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 142.019256][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 142.026442][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 142.037395][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 142.044531][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 142.055511][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 142.062684][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 142.302412][ T8468] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 142.309704][ T8468] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:25:07 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") r6 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r7 = socket(0x11, 0x80002, 0x0) bind$packet(r7, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r7, 0x107, 0x5, &(0x7f0000001000), 0x224) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) 10:25:07 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) 10:25:07 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:07 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 142.517965][ T8468] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 142.525172][ T8468] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 142.598157][ T3890] kobject: 'loop2' (00000000c612d629): kobject_uevent_env [ 142.615295][ T3890] kobject: 'loop2' (00000000c612d629): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 142.616539][ T26] audit: type=1800 audit(1569061507.447:39): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16687 res=0 10:25:07 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:07 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:07 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) socket$l2tp(0x18, 0x1, 0x1) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 142.644712][ T8506] binder: 8495:8506 unknown command 255 [ 142.653834][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 142.685224][ T8506] binder: 8495:8506 ioctl c0306201 20000140 returned -22 10:25:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) socket$l2tp(0x18, 0x1, 0x1) [ 142.703870][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:25:07 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 142.768191][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 142.768980][ T26] audit: type=1800 audit(1569061507.597:40): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16681 res=0 10:25:07 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r6 = socket(0x11, 0x80002, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0x224) r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 142.828362][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 142.913933][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 142.927943][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 142.948575][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 142.957001][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 142.974712][ T8528] binder: 8525:8528 unknown command 255 [ 142.981655][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 142.991106][ T8528] binder: 8525:8528 ioctl c0306201 20000140 returned -22 [ 142.999219][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 143.016211][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 143.023368][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 143.036892][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 143.044086][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 143.057850][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 143.065043][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 143.190102][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 143.199577][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 143.320686][ T8504] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 143.327921][ T8504] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 143.545352][ T8504] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 143.552475][ T8504] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:25:08 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:08 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[], 0x208) r4 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r4, r3, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r8, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x1, 0x60, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208d866017ebad1ab3e28bbd8d2d7e6e4eabff793aae4db0f4da7fe9029c7a15a924d44aa0f939b597f39e130ccd6ff67aeb4b33e01809163ab7e4264ea687df905ff8671e13aceb9a647ce320e55661", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="f526ccb410cfa3decaec9d03d742", @ANYPTR64], @ANYBLOB="c8595029facff56bb513b0e0fa0afa184519766918be0f", @ANYRESDEC, @ANYRES64=r6, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX, @ANYRESHEX, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1]]]}, 0xd8) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:08 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) 10:25:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r6 = socket(0x11, 0x80002, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0x224) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 143.630151][ T3890] kobject: 'loop2' (00000000c612d629): kobject_uevent_env [ 143.649538][ T26] audit: type=1800 audit(1569061508.477:41): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16688 res=0 10:25:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) [ 143.674108][ T3890] kobject: 'loop2' (00000000c612d629): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:25:08 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r3, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) 10:25:08 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 143.711835][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 143.727343][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 143.751655][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env 10:25:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:08 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 143.795482][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 143.866051][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 143.873230][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 143.913185][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 143.921006][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 143.935498][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 143.942925][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 143.960579][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 143.979786][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 144.004980][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 144.014276][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 144.034536][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 144.042339][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.056029][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 144.063251][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 144.299819][ T8550] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 144.307041][ T8550] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 144.342090][ T8549] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 144.349211][ T8549] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r6 = socket(0x11, 0x80002, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0x224) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) 10:25:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r3 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) 10:25:09 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r7, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 10:25:09 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) 10:25:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:09 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 144.431896][ T3890] kobject: 'loop2' (00000000c612d629): kobject_uevent_env [ 144.447911][ T3890] kobject: 'loop2' (00000000c612d629): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:25:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) socket$kcm(0xa, 0x2, 0x73) open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) 10:25:09 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x41, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0xfffffffffffffff9, 0x5, 0x1, 0x5, 0x1, 0xfff, 0xfffffffffffffc00}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x208) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r4, &(0x7f0000000000), 0x8080fffffffe) syz_open_pts(r4, 0x800) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="1e98c00becefa20b93f6b162d4e828790385e5c6948847c472164a51f63474856b28217ce1dae81561ff49194769ba3de04ef2f30c06d4b7a0242a7a1058ab153a9cf2a54207f03f9e0f0c852b7ecab750497ac32d1ef90d6d8802ad781295881e51e42287d8dc325043dbc7535611be23dd719d6f0fcf5b4a7f68ed572e4e22cfd954c4b867d13dd5141e56507a08b193f8ca002512751147091652ea1d4f5493b20c97ccd1cd38ee7aef2710e667f15378022bb08bacdc2499839f0dc7b24d10fb1fc0ea0c0b7f31703d998bf36afdd2de635bd69bf5826f91a72fcc45f454009d575daa20b607eb6931309d843a2e9e96d5") ioctl(r1, 0x1000008912, &(0x7f00000003c0)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r6 = socket(0x11, 0x80002, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r6, 0x107, 0x5, &(0x7f0000001000), 0x224) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x25, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040000000000000000000000000000000000f630c40000000000000e8ffffffffffff"], 0x0, 0x4000, 0x0}) [ 144.485933][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 144.504376][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:25:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:09 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x40007) sendfile(r1, r0, 0x0, 0xffffffff) [ 144.554304][ T3890] kobject: 'loop4' (0000000086a79d18): kobject_uevent_env [ 144.600928][ T3890] kobject: 'loop4' (0000000086a79d18): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 144.635938][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 144.635946][ T26] audit: type=1800 audit(1569061509.467:46): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16717 res=0 [ 144.638589][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 144.684107][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 144.702829][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 144.710094][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 144.734140][ T3890] kobject: 'loop1' (0000000096f3194c): kobject_uevent_env [ 144.760588][ T3890] kobject: 'loop1' (0000000096f3194c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 144.774650][ T3890] kobject: 'loop0' (00000000f139a93f): kobject_uevent_env [ 144.782158][ T3890] kobject: 'loop0' (00000000f139a93f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 144.793028][ T3890] kobject: 'loop5' (000000002d3451ea): kobject_uevent_env [ 144.800280][ T3890] kobject: 'loop5' (000000002d3451ea): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 144.817897][ T3890] kobject: 'loop3' (00000000e1a1febc): kobject_uevent_env [ 144.825056][ T3890] kobject: 'loop3' (00000000e1a1febc): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 145.032932][ T8589] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 145.040419][ T8589] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 145.089736][ T8588] kobject: 'kvm' (000000002e8df454): kobject_uevent_env [ 145.096965][ T8588] kobject: 'kvm' (000000002e8df454): fill_kobj_path: path = '/devices/virtual/misc/kvm' 10:25:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x18, r5, 0x701, 0x0, 0x0, {0x13, 0x0, 0xfffffffffffff000}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x154, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x154}}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10:25:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x24000004) 10:25:09 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[], 0x208) r3 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r3, r2, &(0x7f0000000000), 0x8080fffffffe) r4 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r5 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r5, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r6 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect$pppoe(r1, &(0x7f0000000140