[ 40.184061] audit: type=1800 audit(1573267428.268:32): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.016572] audit: type=1800 audit(1573267429.098:33): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.795263] kauditd_printk_skb: 1 callbacks suppressed [ 45.795277] audit: type=1400 audit(1573267433.878:35): avc: denied { map } for pid=7618 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. 2019/11/09 02:44:00 fuzzer started [ 52.508603] audit: type=1400 audit(1573267440.588:36): avc: denied { map } for pid=7627 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/11/09 02:44:02 dialing manager at 10.128.0.105:41345 2019/11/09 02:44:02 syscalls: 2545 2019/11/09 02:44:02 code coverage: enabled 2019/11/09 02:44:02 comparison tracing: enabled 2019/11/09 02:44:02 extra coverage: extra coverage is not supported by the kernel 2019/11/09 02:44:02 setuid sandbox: enabled 2019/11/09 02:44:02 namespace sandbox: enabled 2019/11/09 02:44:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/09 02:44:02 fault injection: enabled 2019/11/09 02:44:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/09 02:44:02 net packet injection: enabled 2019/11/09 02:44:02 net device setup: enabled 2019/11/09 02:44:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/09 02:44:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:46:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) [ 216.797645] audit: type=1400 audit(1573267604.878:37): avc: denied { map } for pid=7644 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14917 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 216.887072] IPVS: ftp: loaded support on port[0] = 21 02:46:45 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x0, 0x3) [ 216.998525] chnl_net:caif_netlink_parms(): no params data found [ 217.067659] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.091798] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.099494] device bridge_slave_0 entered promiscuous mode [ 217.114158] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.131810] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.139360] device bridge_slave_1 entered promiscuous mode [ 217.163217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.173563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.195150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.198066] IPVS: ftp: loaded support on port[0] = 21 [ 217.202971] team0: Port device team_slave_0 added 02:46:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x23c5a3b657292a0e, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00\x00\x00\x00\x00\x04\x00l\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 217.214107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.221563] team0: Port device team_slave_1 added [ 217.228932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.239159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.334971] device hsr_slave_0 entered promiscuous mode [ 217.372929] device hsr_slave_1 entered promiscuous mode [ 217.413475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 217.426442] IPVS: ftp: loaded support on port[0] = 21 [ 217.433671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 02:46:45 executing program 3: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f00000002c0)={[{@logbsize={'logbsize'}}]}) [ 217.477200] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.483770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.490742] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.497157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.601636] chnl_net:caif_netlink_parms(): no params data found [ 217.675004] IPVS: ftp: loaded support on port[0] = 21 [ 217.691493] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 217.699394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.752645] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.762919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.778076] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.786242] bridge0: port 2(bridge_slave_1) entered disabled state 02:46:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x400) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) [ 217.797029] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 217.806566] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.815247] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.822975] device bridge_slave_0 entered promiscuous mode [ 217.860922] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.869079] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.880609] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.890044] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.899664] device bridge_slave_1 entered promiscuous mode [ 217.930802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.939725] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.946153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.955805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.964325] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.971455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.015569] chnl_net:caif_netlink_parms(): no params data found [ 218.039586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.050557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:46:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000001840)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions='default_permissions'}]}}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x24, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 218.058923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.076071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 218.089225] IPVS: ftp: loaded support on port[0] = 21 [ 218.107964] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.125422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.140397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.150473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.168586] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.176346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.186631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.255053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.263015] team0: Port device team_slave_0 added [ 218.271585] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 218.288921] IPVS: ftp: loaded support on port[0] = 21 [ 218.295784] chnl_net:caif_netlink_parms(): no params data found [ 218.309939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.317302] team0: Port device team_slave_1 added [ 218.322740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.330205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.341509] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.348197] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.355924] device bridge_slave_0 entered promiscuous mode [ 218.363124] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.369466] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.376749] device bridge_slave_1 entered promiscuous mode [ 218.398692] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.453697] device hsr_slave_0 entered promiscuous mode [ 218.492022] device hsr_slave_1 entered promiscuous mode [ 218.534017] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 218.561640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.568536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.582313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.597291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.605862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 218.634892] audit: type=1400 audit(1573267606.718:38): avc: denied { associate } for pid=7645 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 218.661481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.748080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.755618] team0: Port device team_slave_0 added [ 218.761266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.769389] team0: Port device team_slave_1 added [ 218.791589] chnl_net:caif_netlink_parms(): no params data found 02:46:46 executing program 0: [ 218.800979] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.810590] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.818055] device bridge_slave_0 entered promiscuous mode 02:46:46 executing program 0: [ 218.845779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 02:46:46 executing program 0: [ 218.886455] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.894342] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.902677] device bridge_slave_1 entered promiscuous mode [ 218.914035] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.920510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 02:46:47 executing program 0: 02:46:47 executing program 0: 02:46:47 executing program 0: 02:46:47 executing program 0: [ 219.024692] device hsr_slave_0 entered promiscuous mode [ 219.042130] device hsr_slave_1 entered promiscuous mode [ 219.109691] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.120140] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.127670] device bridge_slave_0 entered promiscuous mode [ 219.139206] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 219.146443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 219.155526] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.168715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.177252] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.186707] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.194908] device bridge_slave_1 entered promiscuous mode [ 219.239580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.265978] chnl_net:caif_netlink_parms(): no params data found [ 219.277543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.284855] team0: Port device team_slave_0 added [ 219.290800] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.299317] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.324045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.331315] team0: Port device team_slave_1 added [ 219.341440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.348783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.375785] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.383357] team0: Port device team_slave_0 added [ 219.389985] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.404204] team0: Port device team_slave_1 added [ 219.432502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.439746] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.451775] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.459156] device bridge_slave_0 entered promiscuous mode [ 219.466689] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.474577] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.485756] device bridge_slave_1 entered promiscuous mode [ 219.544684] device hsr_slave_0 entered promiscuous mode [ 219.622006] device hsr_slave_1 entered promiscuous mode [ 219.682820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.699526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.711546] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 219.783960] device hsr_slave_0 entered promiscuous mode [ 219.822143] device hsr_slave_1 entered promiscuous mode [ 219.873079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 219.880173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 219.894958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.901484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 219.911007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.924099] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.935113] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.956813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.964710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.978383] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 219.985207] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.995733] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.003295] team0: Port device team_slave_0 added [ 220.008887] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.016749] team0: Port device team_slave_1 added [ 220.023336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.030784] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.040524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.055272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.063634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.071189] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.077609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.089062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.101180] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.112994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.163578] device hsr_slave_0 entered promiscuous mode [ 220.222260] device hsr_slave_1 entered promiscuous mode [ 220.272848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.280075] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.287778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.296692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.304469] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.310806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.319953] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.330051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.342066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.349414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.363297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.379118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.404651] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.415562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.423718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.441074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.448898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.457041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.470391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.480259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.488662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.498658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.513913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.521146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.528955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.537689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 220.547900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 220.554205] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.563905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.572304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.579893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.590776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 220.600809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.612297] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 220.618321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.627776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.639948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.648292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.655996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.663316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.676135] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 220.684052] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 220.690118] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.704798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.711837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.718912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.726798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.735086] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.741428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.749653] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 220.763286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.770819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.780230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.787788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.795009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.803687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.810519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.818387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.826447] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.832844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.840319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.848417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.856185] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.862573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.870512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.880188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.888555] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.897757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.909281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.916620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.923852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.936048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.948831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.956282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.967061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.975353] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.981733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.988766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.998199] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.005141] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.017170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.026979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.036056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.044984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.052676] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.059130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.066441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.074901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.082851] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.089200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.096953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.114134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.126558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.150856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.161457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.169903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.180952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.192273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.201423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.209709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.220528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.228042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.236888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.245076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.253050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.260646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.269025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.276197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.283467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.293243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 02:46:49 executing program 1: [ 221.307420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 221.316790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.328916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.339305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.362318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.370302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.382628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.390786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.399191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.407181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.415006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.423924] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.429953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.439685] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.446085] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.454126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.461565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.473468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.481169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.494871] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 221.502637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.515413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.523107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.533437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.540116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.549723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.557751] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.564154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.575589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.583852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.593621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.603987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.615404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.622500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.630140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.638070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.646445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.654305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.662215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.669724] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.676106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.693301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 221.710068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 221.729911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.737745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.745794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.753897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.761559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.769420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.773418] hrtimer: interrupt took 23667 ns [ 221.784975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 221.789195] xt_cluster: cannot load conntrack support for proto=7 [ 221.801000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 221.809897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 02:46:49 executing program 2: [ 221.818324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.827344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.834906] xt_cluster: cannot load conntrack support for proto=7 [ 221.835538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.857185] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.865966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.879273] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.887103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.903184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.920337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.936049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.944780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.953505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.962558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.975568] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 221.983679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.006512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.014716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.026585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 222.034855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 222.043286] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 222.050209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.057957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.065890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.072871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.080762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 222.092626] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 222.100863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.111033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.119027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.126221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.134454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.145628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.155703] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 222.162037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.205852] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 222.214443] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 222.220710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.228238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.251423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.333831] XFS (loop3): unknown mount option [logbsize=]. 02:46:50 executing program 3: 02:46:50 executing program 0: 02:46:50 executing program 5: 02:46:50 executing program 1: 02:46:50 executing program 2: 02:46:50 executing program 4: 02:46:50 executing program 0: 02:46:50 executing program 4: 02:46:50 executing program 1: 02:46:50 executing program 2: 02:46:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0d0cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c974dd2de2185a2ae81bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7218fcb5e75d1d7299ff17955", "804c0e6791e9da0c25402952a8dd77a5bf08050500"}) 02:46:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f0000000000ae", 0x1a}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x386}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 02:46:50 executing program 5: 02:46:50 executing program 2: 02:46:50 executing program 0: 02:46:50 executing program 1: 02:46:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) socket$kcm(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 02:46:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006386dd200101000000000000be1d"], 0xfdef) 02:46:50 executing program 3: r0 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 02:46:50 executing program 5: clone(0x2102105ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r1, r2, 0x0, 0x80000003) 02:46:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r1, &(0x7f00000001c0), 0xffffff7f) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) ftruncate(r2, 0x2007fff) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 02:46:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7"], 0xa) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 02:46:51 executing program 5: creat(0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) [ 223.051251] FAT-fs (loop3): bogus number of reserved sectors [ 223.080446] FAT-fs (loop3): Can't find a valid FAT filesystem [ 223.200812] FAT-fs (loop3): bogus number of reserved sectors [ 223.243908] FAT-fs (loop3): Can't find a valid FAT filesystem 02:46:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfe0e) pipe(0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x29c, 0x0, 0x0, 0x1000001e1) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x42d9, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0xffffffffffffffdd) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7fdd7b8ba2960f2194765aca0000804876525dc45a330d4bd6a859704a3b864122281e2accb897c96f7f8db93debd49b334e9ba8e9e96e8951b847017e329a0401bb7d07ddc27068e5e3547450efc1a9abb122735e6b05f134a1dc19d2ce9908765acc2b12cf808a2dd069fed2d5dfaa3ab60ae6a87c5d35ca889f7af61ad61ce4653c05e9b2b0e5571c917a28ea1f34be6feccf5be2dd600b37a28cc00f37654d818f7b0d16c6"], 0xf) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xef) close(r0) 02:46:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000520007021dfffd946f6105000a0000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:46:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setfsuid(0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) 02:46:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) socket$kcm(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) 02:46:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) sendmsg(r2, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) 02:46:53 executing program 1: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f00000000c0), 0x4) [ 225.751467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 02:46:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x90) 02:46:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) 02:46:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) 02:46:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu}) socket(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 02:46:54 executing program 3: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) socket$kcm(0x2, 0x2000000000003, 0x2) close(r0) [ 226.031980] protocol 88fb is buggy, dev hsr_slave_0 [ 226.037336] protocol 88fb is buggy, dev hsr_slave_1 02:46:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x3) 02:46:54 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000004c0), 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000a00)) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000002d80)=0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r4 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041) r5 = dup3(r3, 0xffffffffffffffff, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10800002}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) 02:46:54 executing program 2: ptrace(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000009140)) poll(&(0x7f0000000000)=[{}], 0x1, 0xde87) open(0x0, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000003000/0x2000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 02:46:54 executing program 5: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 02:46:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 226.645652] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 226.690316] audit: type=1400 audit(1573267614.768:39): avc: denied { create } for pid=7876 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 226.727891] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 226.795677] CPU: 0 PID: 7881 Comm: syz-executor.1 Not tainted 4.19.82 #0 [ 226.802556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.811914] Call Trace: [ 226.811947] dump_stack+0x172/0x1f0 [ 226.811970] warn_alloc.cold+0x7b/0x173 [ 226.811988] ? zone_watermark_ok_safe+0x260/0x260 [ 226.812007] ? lock_downgrade+0x880/0x880 [ 226.812030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.812044] ? avc_has_perm+0x404/0x610 [ 226.812068] __vmalloc_node_range+0x486/0x790 02:46:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.857125] RSP: 002b:00007f66d256ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.857142] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 226.857151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.857160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.857169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66d256f6d4 [ 226.857178] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 226.963670] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 226.994710] audit: type=1400 audit(1573267615.028:42): avc: denied { map } for pid=7890 comm="syz-executor.3" path=2F6D656D66643A2D27202864656C6574656429 dev="tmpfs" ino=28396 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 227.014204] Mem-Info: 02:46:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000006c80)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x8000000001, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@can, 0x80, 0x0}, 0x24004c66) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000300)='cpuset.cpus\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@generic={0xa, "548c67ee731a5b6518a6da7905c9c1a7f099e05196b7a21c9f0b5f4a78e54be9900737da608f5a43b6085268568d0b8a23b836d9c169fce22046785c7c124a6a51cb2667c1c5b7b1e6e76156235ed40cd9ca5c9a0a0291f5070d64fcd550a4656abefa1c36be22fe12989dcddecdafc2307ec17e1b643724d3e8c24c2cbc"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="a6", 0x1}], 0x1, &(0x7f0000000340)=[{0x10}, {0x20, 0x84, 0x8, "21f683fc4c823fe995"}], 0x30}, 0x78) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000002b40)={0x0, 0xfffffffffffffc66, &(0x7f00000029c0)=[{&(0x7f0000000480)=""/4096, 0xfffffe66}], 0x1, 0x0, 0xfef9}, 0x0) recvmsg$kcm(r5, &(0x7f0000007e00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000380)={r5}) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="6c38a421cb6d5cfbae4a67a933e6d965ea645b106fbc3e92504e0086", 0x1c}], 0x10000000000002d4, &(0x7f0000001580)=ANY=[], 0x4b2}, 0x4810) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') r6 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r6) [ 227.097750] active_anon:140935 inactive_anon:193 isolated_anon:0 [ 227.097750] active_file:8080 inactive_file:37940 isolated_file:0 [ 227.097750] unevictable:0 dirty:39 writeback:6 unstable:0 [ 227.097750] slab_reclaimable:10980 slab_unreclaimable:90334 [ 227.097750] mapped:59032 shmem:246 pagetables:1099 bounce:0 [ 227.097750] free:1242513 free_pcp:617 free_cma:0 02:46:55 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000280)=0x1) [ 227.209703] Node 0 active_anon:565844kB inactive_anon:772kB active_file:32172kB inactive_file:151760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236228kB dirty:152kB writeback:24kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 321536kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 227.320748] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 02:46:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bpq0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x2}, @ipv6={0x0, 0x6, '=tg', 0xf98, 0x0, 0x0, @rand_addr="2ceb79d676d5fc72a0adf849622d054a", @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment, @fragment={0x2c}, @fragment], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xfe, 0x0, [0x0], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "9c33693197bb170a70cfec811fc2dded2642c4f5a8d3bedf8dac21f48a123c41ff5c5072c00adf60a4747fd02f754484e8ca84c7f3bfb5836714afed794aa9173814c857cc86bec1d653f5f673cd3d92f12a2234a7edc2adaab4be0fec3c2f62ff4d681d28499c0548e0e0583690dfc50c67bb3c062fe2659227485e2a45e0b1bb6bf171dd8ba1e979e1483997245ff6394e63c4947339cc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0, 0x0], "79d3201c5d8c8554e62d"}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x3}}}}}}}, 0xfca) [ 227.382085] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:46:55 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 227.502031] lowmem_reserve[]: 0 2555 2557 2557 [ 227.506702] Node 0 DMA32 free:1169288kB min:36248kB low:45308kB high:54368kB active_anon:559572kB inactive_anon:2172kB active_file:32172kB inactive_file:154660kB unevictable:0kB writepending:3136kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:7584kB pagetables:4396kB bounce:0kB free_pcp:1660kB local_pcp:616kB free_cma:0kB [ 227.581411] audit: type=1326 audit(1573267615.658:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7914 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 227.592449] lowmem_reserve[]: 0 0 2 2 [ 227.616535] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.652956] lowmem_reserve[]: 0 0 0 0 [ 227.658253] Node 1 Normal free:3784088kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.693248] lowmem_reserve[]: 0 0 0 0 [ 227.697337] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 227.721001] Node 0 DMA32: 3495*4kB (UM) 14*8kB (E) 201*16kB (UME) 207*32kB (ME) 50*64kB (UME) 7*128kB (UME) 5*256kB (ME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 275*4096kB (M) = 1162364kB [ 227.745198] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 227.760748] Node 1 Normal: 54*4kB (UE) 277*8kB (UME) 255*16kB (UME) 65*32kB (UE) 14*64kB (UM) 9*128kB (UE) 6*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784080kB [ 227.803711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.827894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.837717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 227.850538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.865305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.881093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 227.891775] 49039 total pagecache pages [ 227.896966] 0 pages in swap cache [ 227.900444] Swap cache stats: add 0, delete 0, find 0/0 [ 227.921537] Free swap = 0kB [ 227.924646] Total swap = 0kB [ 227.924654] 1965979 pages RAM [ 227.924659] 0 pages HighMem/MovableOnly [ 227.924668] 338855 pages reserved [ 227.930768] 0 pages cma reserved [ 227.941734] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 227.941745] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 227.987134] CPU: 1 PID: 7907 Comm: syz-executor.1 Not tainted 4.19.82 #0 [ 227.994025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.003389] Call Trace: [ 228.004749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.005982] dump_stack+0x172/0x1f0 [ 228.006010] warn_alloc.cold+0x7b/0x173 [ 228.006028] ? zone_watermark_ok_safe+0x260/0x260 [ 228.006047] ? lock_downgrade+0x880/0x880 [ 228.037418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.042964] ? avc_has_perm+0x404/0x610 [ 228.042990] __vmalloc_node_range+0x486/0x790 [ 228.043011] ? sel_write_load+0x1de/0x470 [ 228.043025] vmalloc+0x6b/0x90 [ 228.043037] ? sel_write_load+0x1de/0x470 [ 228.043053] sel_write_load+0x1de/0x470 [ 228.043069] __vfs_write+0x114/0x810 [ 228.051607] ? sel_make_policy_nodes+0x1520/0x1520 [ 228.051624] ? kernel_read+0x120/0x120 [ 228.051646] ? __lock_is_held+0xb6/0x140 [ 228.070780] ? rcu_read_lock_sched_held+0x110/0x130 [ 228.070797] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 228.070812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.070825] ? __sb_start_write+0x1a9/0x360 [ 228.070840] vfs_write+0x20c/0x560 [ 228.106988] ksys_write+0x14f/0x2d0 [ 228.110622] ? __ia32_sys_read+0xb0/0xb0 [ 228.114692] ? do_syscall_64+0x26/0x620 [ 228.118676] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.124045] ? do_syscall_64+0x26/0x620 [ 228.128027] __x64_sys_write+0x73/0xb0 [ 228.131928] do_syscall_64+0xfd/0x620 [ 228.135748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.140941] RIP: 0033:0x45a219 [ 228.144146] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.163051] RSP: 002b:00007f66d252cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.170768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 228.178045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.185319] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 228.192594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66d252d6d4 [ 228.199863] R13: 00000000004cac50 R14: 00000000004e3180 R15: 00000000ffffffff [ 228.213966] Mem-Info: [ 228.216507] active_anon:140973 inactive_anon:210 isolated_anon:0 [ 228.216507] active_file:8080 inactive_file:41507 isolated_file:0 [ 228.216507] unevictable:0 dirty:3621 writeback:9 unstable:0 [ 228.216507] slab_reclaimable:11180 slab_unreclaimable:90622 [ 228.216507] mapped:59069 shmem:267 pagetables:1121 bounce:0 [ 228.216507] free:1238361 free_pcp:671 free_cma:0 [ 228.250646] Node 0 active_anon:563892kB inactive_anon:768kB active_file:32220kB inactive_file:165936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236244kB dirty:14520kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 323584kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 228.250673] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 228.250684] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.342869] lowmem_reserve[]: 0 2555 2557 2557 [ 228.347577] Node 0 DMA32 free:1156948kB min:36248kB low:45308kB high:54368kB active_anon:563992kB inactive_anon:768kB active_file:32220kB inactive_file:161836kB unevictable:0kB writepending:10484kB present:3129332kB managed:2619976kB mlocked:0kB kernel_stack:7712kB pagetables:4424kB bounce:0kB free_pcp:2920kB local_pcp:1476kB free_cma:0kB [ 228.380372] audit: type=1326 audit(1573267616.458:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7914 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 228.421006] lowmem_reserve[]: 0 0 2 2 [ 228.433462] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 02:46:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) [ 228.476104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.485116] lowmem_reserve[]: 0 0 0 0 [ 228.489040] Node 1 Normal free:3784080kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.532554] lowmem_reserve[]: 0 0 0 0 [ 228.536586] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 228.550961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.568899] Node 0 DMA32: 3855*4kB (UME) 374*8kB (UME) 383*16kB (ME) 207*32kB (UME) 25*64kB (UME) 6*128kB (ME) 6*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 275*4096kB (M) = 1166588kB [ 228.571131] devpts: called with bogus options [ 228.591976] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB 02:46:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000006c80)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x8000000001, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@can, 0x80, 0x0}, 0x24004c66) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_int(r3, &(0x7f0000000300)='cpuset.cpus\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@generic={0xa, "548c67ee731a5b6518a6da7905c9c1a7f099e05196b7a21c9f0b5f4a78e54be9900737da608f5a43b6085268568d0b8a23b836d9c169fce22046785c7c124a6a51cb2667c1c5b7b1e6e76156235ed40cd9ca5c9a0a0291f5070d64fcd550a4656abefa1c36be22fe12989dcddecdafc2307ec17e1b643724d3e8c24c2cbc"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="a6", 0x1}], 0x1, &(0x7f0000000340)=[{0x10}, {0x20, 0x84, 0x8, "21f683fc4c823fe995"}], 0x30}, 0x78) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000002b40)={0x0, 0xfffffffffffffc66, &(0x7f00000029c0)=[{&(0x7f0000000480)=""/4096, 0xfffffe66}], 0x1, 0x0, 0xfef9}, 0x0) recvmsg$kcm(r5, &(0x7f0000007e00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000380)={r5}) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="6c38a421cb6d5cfbae4a67a933e6d965ea645b106fbc3e92504e0086", 0x1c}], 0x10000000000002d4, &(0x7f0000001580)=ANY=[], 0x4b2}, 0x4810) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') r6 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r6) [ 228.627905] Node 1 Normal: 54*4kB (UE) 277*8kB (UME) 255*16kB (UME) 65*32kB (UE) 14*64kB (UM) 9*128kB (UE) 6*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784080kB [ 228.645442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 02:46:56 executing program 5: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) dup2(r1, r0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) 02:46:56 executing program 3: [ 228.673034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 228.692678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.742148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 228.750779] 46303 total pagecache pages [ 228.831773] protocol 88fb is buggy, dev hsr_slave_0 [ 228.836906] protocol 88fb is buggy, dev hsr_slave_1 [ 228.837747] 0 pages in swap cache [ 228.857684] Swap cache stats: add 0, delete 0, find 0/0 [ 228.902510] Free swap = 0kB [ 228.932798] Total swap = 0kB [ 228.959609] 1965979 pages RAM [ 228.983051] 0 pages HighMem/MovableOnly [ 229.020374] 338855 pages reserved [ 229.049708] 0 pages cma reserved [ 229.072130] protocol 88fb is buggy, dev hsr_slave_0 [ 229.077764] protocol 88fb is buggy, dev hsr_slave_1 [ 229.391768] protocol 88fb is buggy, dev hsr_slave_0 [ 229.396941] protocol 88fb is buggy, dev hsr_slave_1 02:47:02 executing program 2: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, 0x0, 0x0) 02:47:02 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, 0xe8) 02:47:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f0000001a40)={0xa, 0x4e22, 0x0, @rand_addr="f75800f23a77a650fd875e71e85176ba"}, 0x1c, 0x0}}], 0x1, 0x0) 02:47:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:02 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800130800000000a90300000200000000000000080005000200000000000001f36b6744254ffe2e4173a157dcd8d2476d04795b93bfc6afb407dcb7d4380144abbbb4bc9481b435845656e6f859b78cc7d5ece9a6f60d9485b06f1ffb80abb4b501000000fcffffffffffff0ed9abb12edfa687bd902808a5605d1b73d76ea549e2012287087c9acc01ec20b742f700000000000000f6dc99133f0800007f302b0130919f3f4889eead5a447ebe110c149cd634197c9ff810d6f56c338fe8f6f900f8a14c6f015aa5a0e80a088ea01a35d1373925f55287b4347e9f0f85e3251ef663d79259e3d3ce79d1e59a61997c4fe74359d064f46eb1294b4546d2888ec0c0b21ff5311fdc", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair(0x3, 0x2, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r2, &(0x7f00000017c0), 0x351, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vcs\x00', 0x40, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffffffffffffe5, 0x0}}], 0x1, 0x0, 0x0) socketpair(0xa, 0x1, 0xffa4, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="03000000180000003b00ff000000000000000080000000e70000000068d454579042de29506db6c14e000dfdfcf0aa17f1d74208fcfa39a7797b2e2ba17786f5e5359e4b4aa76fdafba38da8a19676a24b48c591637081603cd7402bf78d49e09e501fd541da8c386b86ad4b6f1f5a6a67ed2d9a792101be1f0f5476b8694307635f815aa0b2bbb0d16f52b087b21fbece1831ff1eeda22481e462cfb2e3b10f26a6de7584bc868e0eb637525881910000000000"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) r9 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r10 = fcntl$getown(r9, 0x9) r11 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x20) r12 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(r11, 0xf, &(0x7f0000000180)={0x0, r10}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@local, 0x11dd, 0x2, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) connect$inet6(r12, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r13 = syz_open_procfs(r10, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r12, r13, &(0x7f00000000c0)=0x202, 0x8) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10c800) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r16, 0x29, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa04018}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="68a79829", @ANYRES16=r14, @ANYRES32, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="871b4b929317a008000100", @ANYRES32=r16, @ANYBLOB="0c00120002000000000000000c00020007000000000000000c00050020000000"], 0xa}, 0x1, 0x0, 0x0, 0x4000800}, 0x81) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4396e60a62c702e9}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="080027bd7000fedbdf25020000000c00060003000000000000000c000400000000000000000008000100000000000c000200c1ffffffffffffff0c00040000000000000000000c000800ecb70000000000000c00070008000100", @ANYRES32, @ANYBLOB="0c00050000000000000000000c0003000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x2000}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="feffffef", @ANYRES16=r14, @ANYBLOB="442228bd7001fddbdf25030000000000060002000000000000000c000800ff07000000000000000006009b56b518cc627684"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41110424}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="00ffff00954ce81805e93ffb62f9c4726a7ec21ff135ed0b06e326a9cdd1ea33bc99e0298a5fe10159730c531e57d97dbb70b8fc7bee03a1c81d47a9edfa102c2f129805971d0ee0467f5cd6d9d1815d449aab97d0454ea26f718b4a247ae4f85614c87028164d3b1ffe2f082b98d05b9c7d532877970cc43f10eb4a95f123ed34f0a0045e8c5d899d895e183822ac73940000a82b1e272fb560f13e7a99d01466578c4949b75cc6fe2b0b1365d5bc8e8acb17abab29442cc1fd", @ANYRES16=r14, @ANYBLOB="170726bd7000fddbdf25030000001400070008000100", @ANYRES32=r6, @ANYBLOB="0800010097abcf99ffb0bb7c9b040dbee9eae7ea64325260fad63b027766fa22def5163e503e4985023685310f78287d9ac465a05dde67df0cadfd6b4dbcb7428486f32b51054467bf72b16b06bc37561ff056460a3e84eb542d43641626c9c9352b5a4b837dcc32fc15e47fed5dfdb14403079809f9f14f85461c0232de134862869c101430442373e69cfdcb2a44d820d219b271a73f3165346fd6103f09c2ed5b9a108c13974e4f5d0a77bd181a7dd023933ec4171adbdf7c0cc992ae6d1555108ef701a89eb0810d9724a1b95c46de9a9202ed980588b9be2c26b1ebe2450911734385b16fe8a1355867c103a5e843f29e638a0968a292440ab94694b465ccd03d7d704a2650783957d2d9b22ae1dd2c71e9fe2f9fce5c2e8f3c2f84833add619b067d3103b9e09f", @ANYRES32=r6, @ANYBLOB="0400050300000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) r17 = syz_open_dev$radio(&(0x7f00000017c0)='/dev/radio#\x00', 0x3, 0x2) r18 = syz_open_dev$radio(&(0x7f0000001800)='/dev/radio#\x00', 0x1, 0x2) r19 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timerfd_gettime(r19, &(0x7f0000eb8000)) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001940)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x3040040}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x7c, r14, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r17}, {0x8}, {0x8, 0x1, r18}, {0x8, 0x1, r19}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r20 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) r21 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xc2, 0x14000) r22 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r22, 0x402, 0x800010000000003d) r23 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x100000001, 0x859f04d0effcd82b) r24 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r24, 0x402, 0x800010000000003d) r25 = dup2(0xffffffffffffffff, r24) r26 = creat(&(0x7f0000000280)='./file0\x00', 0x16) r27 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x602220, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r29 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x5, 0x2000) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1400008}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, r14, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r20}, {0x8, 0x1, r21}, {0x8}, {0x8, 0x1, r22}, {0x8, 0x1, r3}, {0x8, 0x1, r23}, {0x8, 0x1, r3}, {0x8, 0x1, r25}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8}, {0x8}, {0x8, 0x1, r26}, {0x8, 0x1, r27}, {0x8, 0x1, r28}, {0x8}, {0x8, 0x1, r29}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x94}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x2c84) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r14, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa5d}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000020}, 0x40a7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r31 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r32 = ioctl$KVM_CREATE_VM(r31, 0xae01, 0x0) r33 = fcntl$dupfd(r32, 0x0, r31) ioctl$KVM_CREATE_IRQCHIP(r33, 0xae60) ioctl$KVM_CREATE_VCPU(r33, 0xae41, 0x0) r34 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r35 = ioctl$KVM_CREATE_VM(r34, 0xae01, 0x0) r36 = fcntl$dupfd(r35, 0x0, r34) ioctl$KVM_CREATE_IRQCHIP(r36, 0xae60) ioctl$KVM_CREATE_VCPU(r36, 0xae41, 0x0) r37 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xb1, 0x8040) r38 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r39 = ioctl$KVM_CREATE_VM(r38, 0xae01, 0x0) r40 = fcntl$dupfd(r39, 0x0, r38) ioctl$KVM_CREATE_IRQCHIP(r40, 0xae60) ioctl$KVM_CREATE_VCPU(r40, 0xae41, 0x0) r41 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0xe0002, 0x0) r42 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x918400, 0x0) ioctl$KDSKBLED(r42, 0x4b65, 0x0) r43 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x918400, 0x0) ioctl$KDSKBLED(r43, 0x4b65, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r14, 0x116, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r30}, {0x8, 0x1, r33}, {0x8, 0x1, r36}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r37}, {0x8, 0x1, r40}, {0x8, 0x1, r41}, {0x8, 0x1, r0}, {0x8, 0x1, r42}, {0x8, 0x1, r43}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0xc006040) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 02:47:02 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) sysfs$3(0x3) [ 234.298028] audit: type=1326 audit(1573267622.378:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7966 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 234.323913] devpts: called with bogus options 02:47:02 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) exit(0x0) 02:47:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) [ 234.364484] audit: type=1400 audit(1573267622.418:46): avc: denied { map } for pid=7971 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29049 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 234.373518] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:47:02 executing program 3: r0 = socket(0x2, 0x4003, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x2, 0xc003, 0x0) connect$unix(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10) dup2(r2, r1) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r3 = dup(r1) socket$inet(0x2, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) [ 234.479447] devpts: called with bogus options 02:47:02 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) [ 234.538707] audit: type=1326 audit(1573267622.618:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7987 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 02:47:02 executing program 2: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 02:47:02 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) [ 234.753419] protocol 88fb is buggy, dev hsr_slave_0 [ 234.758559] protocol 88fb is buggy, dev hsr_slave_1 [ 234.763700] protocol 88fb is buggy, dev hsr_slave_0 [ 234.768811] protocol 88fb is buggy, dev hsr_slave_1 02:47:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$inet(r5, &(0x7f0000000240)=""/231, 0xe7, 0x103, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat(r7, &(0x7f0000000380)='./file0\x00', 0x0, 0x2c) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r8, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) connect(r9, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000500)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r9, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x76f7e318d701661f, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x38}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) [ 235.071807] protocol 88fb is buggy, dev hsr_slave_0 [ 235.077087] protocol 88fb is buggy, dev hsr_slave_1 [ 235.088834] audit: type=1326 audit(1573267623.168:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8006 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 235.116708] audit: type=1326 audit(1573267623.198:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7966 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 235.139388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.157823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:47:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000940)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x7802, 0x1, 0xbdbd, 0x200, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xf8, 0x1, 0x9, 0x7f, 0x0, 0xedde, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf2a, 0x1, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x4, 0x52fb}, 0x0, 0x6, r4, 0x0) gettid() socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000040), 0xab) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x8847000000000000, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) [ 235.172597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:47:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) [ 235.311766] protocol 88fb is buggy, dev hsr_slave_0 [ 235.316885] protocol 88fb is buggy, dev hsr_slave_1 [ 235.330167] audit: type=1326 audit(1573267623.408:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7987 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 [ 235.367470] devpts: called with bogus options 02:47:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) 02:47:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="5c2e5c3a5d2c303a3a303a00b4e81599b0fe9a74954f6f29f20860e7561bfae8ba05ee4243f33e48a274c62a903ddb5b2e98337986c26932659c"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 02:47:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) [ 235.458267] devpts: called with bogus options [ 235.534034] devpts: called with bogus options 02:47:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) 02:47:03 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="13f80f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef04ff46cf47e8137f38ee38898fd565996a1a1f4cd1b86a0e031dff9943c97285dbf286b2e0b83f0811181559c36195a08057260cfc8bbb0acb262dea59bfe1401033d00242995373652a8d036ff9eef59a5ea1849f5630c3a9fe2fc5e879590b2deae7095bef0a19efee20c3d4c19e222f3f51e3c9703ec7637297733385130d"], 0x0, 0x179}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 235.573110] libceph: resolve '\.\' (ret=-3): failed [ 235.592918] libceph: parse_ips bad ip '\.\:],0::0' [ 235.631826] protocol 88fb is buggy, dev hsr_slave_0 [ 235.637073] protocol 88fb is buggy, dev hsr_slave_1 [ 235.650027] devpts: called with bogus options 02:47:03 executing program 1: clone(0x7fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) clone(0x2102001ff0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x5}, 0x20) 02:47:03 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) [ 235.675907] device nr0 entered promiscuous mode [ 235.677084] ptrace attach of "/root/syz-executor.1"[8044] was attempted by "/root/syz-executor.1"[8045] [ 235.775241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.784759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.790053] devpts: called with bogus options [ 235.792788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.878274] audit: type=1326 audit(1573267623.958:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8006 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0xffff0000 02:47:04 executing program 1: socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 02:47:04 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000100000000000000002100000000000000c0010001", 0x34}], 0x1}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) 02:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000600)=0x7fffffff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd, 0x2200000}, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r0, 0x402, 0x1a) write(r3, &(0x7f00000000c0)="6e5a14869769b19907cdd9000000010000", 0x11) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) lseek(r5, 0x7, 0x3) ioctl$RTC_UIE_ON(r7, 0x7003) read$FUSE(r7, &(0x7f0000001100), 0x1000) 02:47:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @gre}}}}, 0x0) 02:47:04 executing program 2: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) [ 236.202950] audit: type=1400 audit(1573267624.288:52): avc: denied { create } for pid=8080 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:47:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) 02:47:04 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000100000000000000002100000000000000c0010001", 0x34}], 0x1}, 0x0) [ 236.246592] IPVS: ftp: loaded support on port[0] = 21 [ 236.259147] audit: type=1400 audit(1573267624.288:53): avc: denied { bind } for pid=8080 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:47:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f000e000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) 02:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$inet6(r2, &(0x7f0000001840)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r4}}}], 0x28}, 0x0) 02:47:04 executing program 0: 02:47:04 executing program 1: [ 236.458830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:47:04 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) [ 236.655820] devpts: called with bogus options [ 236.889050] IPVS: ftp: loaded support on port[0] = 21 02:47:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93\r\x99\xbe\x18\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000280)='\x00\x00\x00\x01\x00\x00\x00\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\xee\xba\x064\xb2\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\xda\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x1f\x00\x00\x00\x00\x00\x00\x00\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17yn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93\r\x99\xbe\x18\xe3c\x8dn\xce\x10\xfc\x97\x85).(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafDd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\x90\x9e}\x89\xff\x8c\xcf\xfd\xffMp\xdc\x9e\xad\x9aj\x99\xd5\xc1\x8f\xb5S\xcb\rA\xc5\xc2\x16\x95\x9f\xa8\xc8\x86\v-\xb4\xb5c\x94\xc6\xca\x9b\xee\x02I:\x98SF\x82\xac\x0e~~\x15\fn\xe2X\xe3%\xc7\x04q\x87\x8d\xe6\xee\xc0\x82w\xa9rX\v\x1f9\xcc-&8\x06W\x83\xa9\xca\xa5\xba\x7f\xae\xe4\xea') 02:47:05 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 02:47:05 executing program 2: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 02:47:05 executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 02:47:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x38f4168b7592eaea, 0xed13f8ac3df0acdb, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') dup2(r1, r0) 02:47:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 02:47:05 executing program 5: [ 237.016938] devpts: called with bogus options [ 237.021527] audit: type=1400 audit(1573267625.098:54): avc: denied { map } for pid=8122 comm="syz-executor.3" path="/dev/ashmem" dev="devtmpfs" ino=16473 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 02:47:05 executing program 3: 02:47:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:05 executing program 5: [ 237.191606] devpts: called with bogus options 02:47:05 executing program 3: 02:47:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:05 executing program 5: 02:47:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000280)) [ 237.297267] devpts: called with bogus options 02:47:05 executing program 2: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) 02:47:05 executing program 1: 02:47:05 executing program 3: 02:47:05 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:05 executing program 5: 02:47:05 executing program 0: 02:47:05 executing program 0: 02:47:05 executing program 1: [ 237.580316] devpts: called with bogus options 02:47:05 executing program 3: 02:47:05 executing program 5: 02:47:05 executing program 0: 02:47:05 executing program 1: 02:47:06 executing program 2: 02:47:06 executing program 5: 02:47:06 executing program 3: 02:47:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:06 executing program 0: 02:47:06 executing program 1: 02:47:06 executing program 5: 02:47:06 executing program 3: 02:47:06 executing program 2: 02:47:06 executing program 1: 02:47:06 executing program 0: 02:47:06 executing program 5: 02:47:06 executing program 3: 02:47:06 executing program 2: 02:47:06 executing program 3: [ 238.592320] devpts: called with bogus options 02:47:07 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x34}}, 0x0) 02:47:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:47:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x88031, 0x0) 02:47:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, 0x0) 02:47:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$vcsa(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 02:47:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/49, 0x34010}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 02:47:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) [ 239.432445] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 239.433008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.459308] devpts: called with bogus options 02:47:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="a6ebeff2aec1c7219be7d2959bc14587d78c264e51000000000000000000000000000068a27804ac0f6846694943b94941fe0ceecd02000000000000001e45b8d876943bca66db0ec88622dcb1e25c8bacd13a2b477f53084266b767a18386f091f1d09a6b638d6e6238a7ebd6c9392320db01ff6fa807ff30ef0dd256e1cc8dd8bbbdcf9d78d459fc", 0x89}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x13b) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:47:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) 02:47:07 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast, {[@rr={0x7, 0x3, 0xaa}, @rr={0x7, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 02:47:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r1, &(0x7f0000000240)="450000a3d8c48f138fae6bffa5dc69130729637d", 0x2cf, 0x0, 0x0, 0x0) [ 239.791775] net_ratelimit: 14 callbacks suppressed [ 239.791782] protocol 88fb is buggy, dev hsr_slave_0 [ 239.801851] protocol 88fb is buggy, dev hsr_slave_1 02:47:08 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:08 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x5}, 0x10000, 0x10000000000000, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) getpid() lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb3, 0x80800) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0xedc582076c6618d4) r3 = mq_open(&(0x7f0000000180)='posix_acl_acceA\xc5\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) mq_timedreceive(r3, &(0x7f0000000300)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/61, 0x3d, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xfffffffffffffe08, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f00000012c0)='wl\tn1 \xf3K\x86%*\xe0\x00\\c\x1a\xd6)\xa01h\xaf\x87\'\xcdX4n\x87y\x16\xf5\xc2\xcc\x8c\xb4\x06.Q\xfe\xd7(\xa8\xb0\x12\x8fs\x81/\xa1\x888\xd0\xf0F\xa0\x0fi\xeb\'\xf46G\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00\x00!u\xe9\x01\x1d\xcds\'\x80\xa1\x10z\xf6W\xb1a\xb6\x83\xe2O;\xd6c\x1c\x8b\x00'/119, 0x9ab9dc8fb273c4f4, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000000000, 0x1f}) mq_timedreceive(r4, &(0x7f0000000300)=""/24, 0x40, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x847e3dccab8a0003, 0x85, &(0x7f0000000080)={0x0, 0x1, 0x80000005, 0x0, 0x3}) mq_timedreceive(r5, &(0x7f0000000300)=""/24, 0x1aa, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x27c, 0x2, 0x0) 02:47:08 executing program 3: unshare(0x2000400) r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x0) 02:47:08 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r0, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000600)=""/155, 0x9b}], 0x2, &(0x7f00000003c0)=""/67, 0x43}, 0x20}, {{&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)=""/83, 0x53}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/155, 0x9b}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001c40)=""/245, 0xf5}, {&(0x7f0000001d40)=""/225, 0xe1}], 0x8, &(0x7f0000001e40)=""/212, 0xd4}, 0x51}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/103, 0x67}, {&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/178, 0xb2}, {0x0}, {&(0x7f00000041c0)=""/160, 0xa0}], 0x7, &(0x7f00000042c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000052c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/92, 0x5c}], 0x1}}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f0000005780)=[{&(0x7f0000005480)=""/126, 0x7e}, {&(0x7f0000005500)=""/3, 0x3}, {&(0x7f0000005540)=""/165, 0xa5}, {&(0x7f0000005900)=""/233, 0xe9}, {&(0x7f0000005700)=""/68, 0x44}], 0x5, &(0x7f00000057c0)=""/70, 0x46}}], 0x5, 0x2, 0x0) 02:47:08 executing program 1: getpid() r0 = socket(0x10, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(0xffffffffffffffff, &(0x7f0000000480)=@proc, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000600)=""/155, 0x9b}], 0x2, &(0x7f00000003c0)=""/67, 0x43}, 0x20}, {{&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)=""/83, 0x53}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/155, 0x9b}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001c40)=""/245, 0xf5}, {&(0x7f0000001d40)=""/225, 0xe1}], 0x8, &(0x7f0000001e40)=""/212, 0xd4}, 0x51}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/103, 0x67}, {&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/178, 0xb2}, {&(0x7f0000004180)=""/52, 0x34}, {&(0x7f00000041c0)=""/160, 0xa0}], 0x7, &(0x7f00000042c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000052c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/92, 0x5c}], 0x1}}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f0000005780)=[{&(0x7f0000005480)=""/126, 0x7e}, {&(0x7f0000005500)=""/3, 0x3}, {&(0x7f0000005540)=""/165, 0xa5}, {&(0x7f0000005900)=""/233, 0xe9}, {&(0x7f0000005700)=""/68, 0x44}], 0x5, &(0x7f00000057c0)=""/70, 0x46}}], 0x5, 0x2, 0x0) 02:47:08 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140), 0x4) connect$inet(r1, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r0, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000600)=""/155, 0x9b}], 0x2, &(0x7f00000003c0)=""/67, 0x43}, 0x20}, {{&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/155, 0x9b}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001c40)=""/245, 0xf5}, {&(0x7f0000001d40)=""/225, 0xe1}], 0x7, &(0x7f0000001e40)=""/212, 0xd4}, 0x51}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/103, 0x67}, {&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/178, 0xb2}, {&(0x7f0000004180)=""/52, 0x34}, {&(0x7f00000041c0)=""/160, 0xa0}], 0x7, &(0x7f00000042c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000052c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/92, 0x5c}], 0x1}, 0x1}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f0000005780)=[{&(0x7f0000005480)=""/126, 0x7e}, {&(0x7f0000005500)=""/3, 0x3}, {&(0x7f0000005540)=""/165, 0xa5}, {&(0x7f0000005900)=""/233, 0xe9}, {&(0x7f0000005700)=""/68, 0x44}], 0x5, &(0x7f00000057c0)=""/70, 0x46}, 0x7ff}], 0x5, 0x2, 0x0) [ 240.327232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8262 comm=syz-executor.0 [ 240.344204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8262 comm=syz-executor.0 [ 240.368997] devpts: called with bogus options [ 240.460066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8275 comm=syz-executor.0 [ 240.491617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8283 comm=syz-executor.0 02:47:08 executing program 5: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x81, 0x0) 02:47:08 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x0, 0x0) getpid() creat(0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000600)=""/155, 0x9b}], 0x2, &(0x7f00000003c0)=""/67, 0x43}, 0x20}, {{&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)=""/83, 0x53}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/217, 0xd9}, {0x0}, {&(0x7f0000001c40)=""/245, 0xf5}, {&(0x7f0000001d40)=""/225, 0xe1}], 0x7, &(0x7f0000001e40)=""/212, 0xd4}, 0x51}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/103, 0x67}, {&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/178, 0xb2}, {&(0x7f0000004180)=""/52, 0x34}, {&(0x7f00000041c0)=""/160, 0xa0}], 0x7, &(0x7f00000042c0)=""/4096, 0x1000}}, {{&(0x7f00000052c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/92, 0x5c}], 0x1}}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f0000005780)=[{&(0x7f0000005480)=""/126, 0x7e}, {&(0x7f0000005500)=""/3, 0x3}, {&(0x7f0000005540)=""/165, 0xa5}, {&(0x7f0000005900)=""/233, 0xe9}, {&(0x7f0000005700)=""/68, 0x44}], 0x5, &(0x7f00000057c0)=""/70, 0x46}}], 0x5, 0x2, 0x0) 02:47:08 executing program 1: unshare(0x100) 02:47:08 executing program 0: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@logbsize={'logbsize', 0x3d, [0x67]}}]}) [ 240.671777] protocol 88fb is buggy, dev hsr_slave_0 [ 240.676965] protocol 88fb is buggy, dev hsr_slave_1 02:47:08 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setregid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 02:47:08 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 240.848191] XFS (loop5): Invalid superblock magic number [ 240.954965] XFS (loop5): Invalid superblock magic number [ 240.991864] protocol 88fb is buggy, dev hsr_slave_0 [ 240.997037] protocol 88fb is buggy, dev hsr_slave_1 [ 241.002227] protocol 88fb is buggy, dev hsr_slave_0 [ 241.007290] protocol 88fb is buggy, dev hsr_slave_1 02:47:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) [ 241.229156] devpts: called with bogus options 02:47:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x5}, 0x10000, 0x10000000000000, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) getpid() lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb3, 0x80800) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0xedc582076c6618d4) r3 = mq_open(&(0x7f0000000180)='posix_acl_acceA\xc5\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) mq_timedreceive(r3, &(0x7f0000000300)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/61, 0x3d, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xfffffffffffffe08, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f00000012c0)='wl\tn1 \xf3K\x86%*\xe0\x00\\c\x1a\xd6)\xa01h\xaf\x87\'\xcdX4n\x87y\x16\xf5\xc2\xcc\x8c\xb4\x06.Q\xfe\xd7(\xa8\xb0\x12\x8fs\x81/\xa1\x888\xd0\xf0F\xa0\x0fi\xeb\'\xf46G\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00\x00!u\xe9\x01\x1d\xcds\'\x80\xa1\x10z\xf6W\xb1a\xb6\x83\xe2O;\xd6c\x1c\x8b\x00'/119, 0x9ab9dc8fb273c4f4, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000000000, 0x1f}) mq_timedreceive(r4, &(0x7f0000000300)=""/24, 0x40, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x847e3dccab8a0003, 0x85, &(0x7f0000000080)={0x0, 0x1, 0x80000005, 0x0, 0x3}) mq_timedreceive(r5, &(0x7f0000000300)=""/24, 0x1aa, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x27c, 0x2, 0x0) 02:47:09 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:47:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180d30000000180c206000008004500001c000000000000907800000000ffffffff00ff907800000000"], 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/84) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 02:47:09 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:47:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) [ 241.391003] devpts: called with bogus options 02:47:09 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 02:47:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/84) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) 02:47:09 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 241.542834] devpts: called with bogus options 02:47:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:09 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 241.729665] devpts: called with bogus options 02:47:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x5}, 0x10000, 0x10000000000000, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) getpid() lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb3, 0x80800) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0xedc582076c6618d4) r3 = mq_open(&(0x7f0000000180)='posix_acl_acceA\xc5\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) mq_timedreceive(r3, &(0x7f0000000300)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/61, 0x3d, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xfffffffffffffe08, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f00000012c0)='wl\tn1 \xf3K\x86%*\xe0\x00\\c\x1a\xd6)\xa01h\xaf\x87\'\xcdX4n\x87y\x16\xf5\xc2\xcc\x8c\xb4\x06.Q\xfe\xd7(\xa8\xb0\x12\x8fs\x81/\xa1\x888\xd0\xf0F\xa0\x0fi\xeb\'\xf46G\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00\x00!u\xe9\x01\x1d\xcds\'\x80\xa1\x10z\xf6W\xb1a\xb6\x83\xe2O;\xd6c\x1c\x8b\x00'/119, 0x9ab9dc8fb273c4f4, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000000000, 0x1f}) mq_timedreceive(r4, &(0x7f0000000300)=""/24, 0x40, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x847e3dccab8a0003, 0x85, &(0x7f0000000080)={0x0, 0x1, 0x80000005, 0x0, 0x3}) mq_timedreceive(r5, &(0x7f0000000300)=""/24, 0x1aa, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x27c, 0x2, 0x0) 02:47:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000007680)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000076c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 02:47:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="010006d2abeeceb917406239b54fd9a600001d821f69f37f38c11a8645dea76ed6123980030000000000000098c2701fdef3ae6a673d78170fbe72a29096508c16b4b66c028a79bdba6e2fc5db3533f0984f8fe4ed806c1bf717808b70f6fbc97de7119bd26787d982d495a725fb25da4932fadfc88825605f9838f5d5fd0000000000000000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x80000) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000380)={0x1, 0xb63}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:47:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:10 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:47:10 executing program 0: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x400, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="010006d2abeeceb917406239b54fd9a600001d821f69f37f38c11a8645dea76ed6123980030000000000000098c2701fdef3ae6a673d78170fbe72a29096508c16b4b66c028a79bdba6e2fc5db3533f0984f8fe4ed806c1bf717808b70f6fbc97de7119bd26787d982d495a725fb25da4932fadfc88825605f9838f5d5fd0000000000000000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000380)={0x1, 0xb63}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x9, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 242.002981] devpts: called with bogus options 02:47:10 executing program 0: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:10 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) 02:47:10 executing program 0: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 242.218617] devpts: called with bogus options 02:47:10 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x5}, 0x10000, 0x10000000000000, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) getpid() lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb3, 0x80800) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0xedc582076c6618d4) r3 = mq_open(&(0x7f0000000180)='posix_acl_acceA\xc5\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) mq_timedreceive(r3, &(0x7f0000000300)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/61, 0x3d, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xfffffffffffffe08, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f00000012c0)='wl\tn1 \xf3K\x86%*\xe0\x00\\c\x1a\xd6)\xa01h\xaf\x87\'\xcdX4n\x87y\x16\xf5\xc2\xcc\x8c\xb4\x06.Q\xfe\xd7(\xa8\xb0\x12\x8fs\x81/\xa1\x888\xd0\xf0F\xa0\x0fi\xeb\'\xf46G\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00\x00!u\xe9\x01\x1d\xcds\'\x80\xa1\x10z\xf6W\xb1a\xb6\x83\xe2O;\xd6c\x1c\x8b\x00'/119, 0x9ab9dc8fb273c4f4, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000000000, 0x1f}) mq_timedreceive(r4, &(0x7f0000000300)=""/24, 0x40, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x847e3dccab8a0003, 0x85, &(0x7f0000000080)={0x0, 0x1, 0x80000005, 0x0, 0x3}) mq_timedreceive(r5, &(0x7f0000000300)=""/24, 0x1aa, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x27c, 0x2, 0x0) 02:47:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20, @multicast1}, 0x10) 02:47:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 02:47:10 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ftruncate(r1, 0x401) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/160) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x2ba, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffff4f) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) creat(&(0x7f0000000300)='./bus\x00', 0x0) 02:47:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002) [ 242.710338] kvm: pic: non byte read [ 242.730593] kvm: pic: non byte read [ 242.730739] audit: type=1804 audit(1573267630.808:55): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/34/bus" dev="sda1" ino=16679 res=1 [ 242.737917] kvm: pic: non byte read [ 242.760723] protocol 88fb is buggy, dev hsr_slave_0 [ 242.767928] kvm: pic: non byte read [ 242.769459] protocol 88fb is buggy, dev hsr_slave_1 [ 242.794633] kvm: pic: non byte read [ 242.811505] kvm: pic: non byte read [ 242.820358] kvm: pic: non byte read [ 242.832438] kvm: pic: non byte read [ 242.844031] kvm: pic: non byte read [ 242.854510] kvm: pic: non byte read [ 242.874978] audit: type=1804 audit(1573267630.878:56): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/34/bus" dev="sda1" ino=16679 res=1 02:47:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x2000000000000074, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) sendto$inet(r0, &(0x7f0000001340)="f4df549aed4e147a8b22543e828dc1debb6b2f5627b348c8d9c30a15f53268a30ef6fd0442a98f75ec5f67c0164a40982eb494653725a712a31de7732e0c3edde08785a34f671fb8be2df4914196c73e666e70cbb925482b6f4b0f39c668f883458e9f9c251b431b50", 0x1035, 0x0, 0x0, 0x0) 02:47:11 executing program 0: r0 = socket$kcm(0x2, 0x0, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:11 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) 02:47:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$setpipe(r1, 0x407, 0x0) [ 243.274115] devpts: called with bogus options 02:47:11 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x47f, &(0x7f0000000040)=[{0x0, 0xfffffffffffffcc2}], 0x1}, 0x0) r0 = socket(0x10, 0x10000000080002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001084000040d0005000005000000060000ff", 0x29}], 0x14a) sendmmsg$alg(r0, &(0x7f0000000100), 0xe664a819220fc5, 0x0) 02:47:11 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:11 executing program 0: socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) [ 243.555450] devpts: called with bogus options 02:47:11 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:47:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)=' ', 0x1, 0x0, 0x0, 0x0) 02:47:11 executing program 0: socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:11 executing program 0: socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 02:47:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 02:47:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x8db9) sendfile(r3, r4, 0x0, 0x8000fffffffe) 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000000)) [ 243.889053] audit: type=1804 audit(1573267631.968:57): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir147597413/syzkaller.2eyqff/32/bus" dev="sda1" ino=16681 res=1 02:47:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)='oom_score\x00', 0xa, 0x1) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000000)) 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000000)) 02:47:12 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 02:47:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000380)='oom_score\x00', 0xa, 0x1) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 02:47:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) [ 244.537498] devpts: called with bogus options 02:47:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_smack_entry(0x0, &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)='oom_score\x00', 0xa, 0x1) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) [ 244.609934] audit: type=1804 audit(1573267632.688:58): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/37/memory.events" dev="sda1" ino=16646 res=1 02:47:12 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) [ 244.794960] audit: type=1800 audit(1573267632.728:59): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16646 res=0 [ 244.831792] net_ratelimit: 2 callbacks suppressed [ 244.831803] protocol 88fb is buggy, dev hsr_slave_0 [ 244.836951] audit: type=1804 audit(1573267632.738:60): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/37/memory.events" dev="sda1" ino=16646 res=1 [ 244.841830] protocol 88fb is buggy, dev hsr_slave_1 [ 244.869228] audit: type=1804 audit(1573267632.768:61): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/37/memory.events" dev="sda1" ino=16646 res=1 [ 244.992725] audit: type=1804 audit(1573267632.768:62): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir555534723/syzkaller.mUeGON/37/memory.events" dev="sda1" ino=16646 res=1 [ 245.021634] audit: type=1800 audit(1573267632.768:63): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16646 res=0 02:47:13 executing program 2: 02:47:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c09, 0x0) 02:47:13 executing program 5: [ 245.082550] audit: type=1804 audit(1573267632.878:64): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir147597413/syzkaller.2eyqff/32/bus" dev="sda1" ino=16681 res=1 02:47:13 executing program 0: 02:47:13 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000ec00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) getgid() getegid() request_key(0x0, 0x0, &(0x7f0000000280)='em1vmnet0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x80080, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="1d0a9b70c8ba682160fc36629fb8abf5884d6351cb9266b407b325ff40c0f2e9b807cf93c3c5a84baf6e530105611d2b7d") r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x220200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0xba, 0x7, 0x10000}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5ebf1d0f03eaee01}, 0x839bed49d968d7f8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = dup2(r1, 0xffffffffffffffff) mknodat(r4, &(0x7f00000003c0)='./bus\x00', 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 245.151771] protocol 88fb is buggy, dev hsr_slave_0 [ 245.156919] protocol 88fb is buggy, dev hsr_slave_1 [ 245.162110] protocol 88fb is buggy, dev hsr_slave_0 [ 245.167559] protocol 88fb is buggy, dev hsr_slave_1 [ 245.298131] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 02:47:13 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fchmod(r0, 0x5a19cc1ae009dfad) 02:47:13 executing program 3: r0 = open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000180)={'\x00G\xc1', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x202002) r3 = gettid() write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x21, 0x37, 0x2, {0x0, 0x9, 0x0, r3, 0x3, '\x00G\xc1'}}, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000a80), 0x0, 0x0, &(0x7f0000000b80)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:47:13 executing program 0: 02:47:13 executing program 5: 02:47:13 executing program 1: [ 245.420909] syz-executor.1 (8554) used greatest stack depth: 21328 bytes left 02:47:13 executing program 5: 02:47:13 executing program 0: [ 245.515015] devpts: called with bogus options 02:47:13 executing program 2: 02:47:13 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:13 executing program 5: 02:47:13 executing program 1: 02:47:13 executing program 0: 02:47:13 executing program 1: [ 245.700937] devpts: called with bogus options [ 245.840105] IPVS: ftp: loaded support on port[0] = 21 [ 245.999108] IPVS: ftp: loaded support on port[0] = 21 [ 246.031809] protocol 88fb is buggy, dev hsr_slave_0 [ 246.036923] protocol 88fb is buggy, dev hsr_slave_1 02:47:14 executing program 5: 02:47:14 executing program 2: 02:47:14 executing program 0: 02:47:14 executing program 1: 02:47:14 executing program 3: r0 = open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000180)={'\x00G\xc1', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x202002) r3 = gettid() write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x21, 0x37, 0x2, {0x0, 0x9, 0x0, r3, 0x3, '\x00G\xc1'}}, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000a80), 0x0, 0x0, &(0x7f0000000b80)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:47:14 executing program 2: 02:47:14 executing program 5: [ 246.365697] IPVS: ftp: loaded support on port[0] = 21 02:47:14 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:14 executing program 0: 02:47:14 executing program 2: 02:47:14 executing program 1: 02:47:14 executing program 5: 02:47:14 executing program 1: 02:47:14 executing program 2: 02:47:14 executing program 5: [ 246.564494] devpts: called with bogus options 02:47:14 executing program 0: 02:47:14 executing program 3: 02:47:14 executing program 5: 02:47:14 executing program 1: [ 246.922561] protocol 88fb is buggy, dev hsr_slave_0 [ 246.927646] protocol 88fb is buggy, dev hsr_slave_1 02:47:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r4}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r4, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:15 executing program 0: 02:47:15 executing program 2: 02:47:15 executing program 5: 02:47:15 executing program 1: 02:47:15 executing program 3: 02:47:15 executing program 1: 02:47:15 executing program 5: 02:47:15 executing program 2: 02:47:15 executing program 0: 02:47:15 executing program 3: 02:47:15 executing program 1: [ 247.543452] devpts: called with bogus options 02:47:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r4}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r4, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:16 executing program 3: 02:47:16 executing program 0: 02:47:16 executing program 2: 02:47:16 executing program 5: 02:47:16 executing program 1: 02:47:16 executing program 0: 02:47:16 executing program 5: [ 248.456750] devpts: called with bogus options 02:47:16 executing program 1: 02:47:16 executing program 2: 02:47:16 executing program 3: 02:47:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000280)=0x7) 02:47:17 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r4}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r4, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 02:47:17 executing program 5: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 02:47:17 executing program 1: 02:47:17 executing program 2: 02:47:17 executing program 3: 02:47:17 executing program 0: 02:47:17 executing program 2: syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='\\.\\:],0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 02:47:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x9, 0x4) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x200000000304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {{0x0, 0x0, &(0x7f000000c600), 0x0, 0x0, 0x133, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f0000000640)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f0000000240)=""/40, 0x28}, 0x206}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x1c, 0x0) 02:47:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xb) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) write$char_usb(r0, &(0x7f0000000180)="269da7925c513e2b5f63b2255c0816b52aefc76c25f7e95a49bc9d77be564bddb046b4865ee22ab18a4d3a086c4d45390505a632d48a2246bac759901e42bfb089765d91409030e37749aae88f65c966e40eb36c6985481397e969dbba52062c0bce5abf7cbab6accdafd51df0298f146fdc52e3e43da8abb9a37372807105955d0bfc024a0c89ea41", 0x89) syz_open_dev$swradio(0x0, 0x0, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x800007fd, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="5c2e5c3a5d2c303a3a303a00b4e81599b0fe9a74954f6f29f20860e7561bfae8ba05ee4243f33e48a274c62a903ddb5b2e98337986c26932659c853806c9888681d70de5f437c6a7e8"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 02:47:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="80f17a0b8c8970cad4e7c2198c830f262255157995a738328a6ea456e2363942b6223ced8e1d157847f0c1b27a6f790486384b94faefd0dfba2444691133054cc3c8e8e0c3448446a3c2b9f6f110a48d3902d829438729dc7496c17992daebf777fcec616e2ab5ee4386fc35ddb3c5be", 0x70}], 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r0, 0x4000000000000001) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/223, 0xdf}], 0x1, 0x0, 0x0, 0x7}}], 0x1, 0x0, 0x0) [ 249.363747] devpts: called with bogus options 02:47:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 249.407451] libceph: resolve '\.\' (ret=-3): failed 02:47:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sync() [ 249.453678] libceph: parse_ips bad ip '\.\:],0' [ 249.871758] net_ratelimit: 12 callbacks suppressed [ 249.871766] protocol 88fb is buggy, dev hsr_slave_0 [ 249.881828] protocol 88fb is buggy, dev hsr_slave_1 02:47:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 02:47:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d808f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x79e2494) 02:47:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1000000000000002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10003) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000540)=0x89, 0xff7f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)}, {0x0}, {0x0}, {&(0x7f0000000340)="448fb6138a93fa35d875ecdf50258645d03141a140cee6a4cf0e548e7c25d6764086d72ac9042abcd9071d3183be5126d28b7f16adc9fdf9707ed648d7be84f86d46cca6ce54b64eafcb2c5920a80f32bbfcbecdf642e4767f6c2c760e3ba9f3d81ff0eabe9b4d9e4b6b53ec467aaf6330427f9eee0177f64ef7ae91a94ed515fa11f7a462c9248acef34f62eb40519cb1b99e1f88ad211cbc75b5309ca05ea33e", 0xa1}], 0x4}, 0x4c000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20, @multicast1}, 0x10) sendfile(r1, r0, 0x0, 0x10003) 02:47:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x15800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:47:18 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x0) rename(0x0, 0x0) close(0xffffffffffffffff) 02:47:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 02:47:18 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000012c0)) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2008000fffffffe) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) dup3(r2, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x6, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x25}, @map={0x18, 0xa, 0x1, 0x0, 0x1}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='GPL\x00', 0x4, 0xb0, &(0x7f0000000100)=""/176, 0x0, 0x1, [], 0x0, 0xb, r0, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0xc, 0x5}, 0x10}, 0x70) socketpair$unix(0x1, 0x2, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003400000bfa300000000000007020000fffeffff7a03f0fff8ffffff79a4f0ff00000000b7060000000000012d640100000000006502faff000000000404000001007d60b7030000001000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x125}, 0x48) r3 = getpid() tkill(r3, 0x9) [ 250.294486] devpts: called with bogus options 02:47:18 executing program 3: r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000040)) [ 250.349366] kauditd_printk_skb: 2 callbacks suppressed [ 250.349379] audit: type=1400 audit(1573267638.408:67): avc: denied { prog_load } for pid=8728 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 02:47:18 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c3400000000032f00000000000000000000000000000000000000000000400000000000000000000000001c000000000000adec90c33c8200003800000044ac6fb5f547dc52"], 0x48) 02:47:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="90379c597b8b", [], {@ipv6={0x86dd, {0x0, 0x6, "5c000f", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@echo_reply}}}}}, 0x0) 02:47:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 02:47:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d808f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x79e2494) 02:47:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 02:47:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000040), 0xfd1b, 0x4004800, 0x0, 0x0) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) 02:47:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80000000000a925, 0xb}) 02:47:19 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 02:47:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) 02:47:19 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) sendmmsg(r3, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:47:19 executing program 0: pipe(&(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) eventfd2(0x0, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 251.207434] devpts: called with bogus options 02:47:19 executing program 2: pipe(&(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) eventfd2(0x0, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 02:47:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00300002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000800010063627300a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400010000800000000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d94b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000000d9c3ffffee0000000100000000000000001000006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f0000100005001f02df00e5b9fb0007000000100003001f0003000700000001010000180001000501040009000000040000000104000000000000f2275eef7138e6d8404ee35c1c03d0a7e3015b89e6e440ebafa27d5b8188804cd5beea2fda73c030f26439c9e4f2e27a824bfb4415f2af99b482560d1a447df28d8d838ad1a39caf40dc96c5f134529d47c0604f66f8714f8ee594e71165c4b029a7dc7e2f90de64a234d9098b06231c71bc79c43de912eb17614cf75d8c49152a801ac9a1326f0e334e0534faa8d8704d03c25495230a2ed4feb5298d99c124310dd877185ebdc389b927fbef0d13c3fd02dcf10ccd97af0b5f53363942e80ada17f524179cc71ea3c52ac33efaa6c2fb807d46a501002a8cb3f0b3d33ab580c42295aec56ab0d771b847c63bc403a4a9d6a99f3742378bbeaf2e86a210ed4be308e6b2d06e7bd7ec8120e6d402937040774df58ae8d179eabc0667"], 0x8d0}}, 0x0) [ 251.393009] protocol 88fb is buggy, dev hsr_slave_0 [ 251.398143] protocol 88fb is buggy, dev hsr_slave_1 [ 251.403307] protocol 88fb is buggy, dev hsr_slave_0 [ 251.408374] protocol 88fb is buggy, dev hsr_slave_1 02:47:19 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) sendmmsg$sock(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="526b60ef8c0fbf8238f26ecdafbf97e69541b19392b3252280155728", 0x2000091c}], 0x1}, 0xfffffff0}], 0x1, 0xffffff7f) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0), &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x2) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x130, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x60041, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 02:47:19 executing program 0: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000001809"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) ioctl$GIO_FONTX(r1, 0x5605, 0x0) [ 251.711785] protocol 88fb is buggy, dev hsr_slave_0 [ 251.716978] protocol 88fb is buggy, dev hsr_slave_1 [ 251.734705] netlink: 932 bytes leftover after parsing attributes in process `syz-executor.5'. [ 251.744224] kasan: CONFIG_KASAN_INLINE enabled [ 251.749438] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 251.758358] audit: type=1804 audit(1573267639.838:68): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2328 res=1 [ 251.766996] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 251.785866] CPU: 0 PID: 8802 Comm: syz-executor.5 Not tainted 4.19.82 #0 [ 251.792911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.802278] RIP: 0010:hrtimer_active+0x11e/0x230 [ 251.807055] Code: 48 39 c3 0f 84 d3 00 00 00 e8 2e 22 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 251.810063] audit: type=1804 audit(1573267639.848:69): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/" dev="sda1" ino=2328 res=1 [ 251.825970] RSP: 0018:ffff88805618f350 EFLAGS: 00010202 [ 251.825982] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc900108d4000 [ 251.825991] RDX: 000000000000c95b RSI: ffffffff815ba512 RDI: ffff888097d19040 [ 251.825999] RBP: ffff88805618f3a8 R08: ffff888055f28280 R09: 0000000000000000 [ 251.826008] R10: ffffed1012fa31bc R11: ffff888097d18de7 R12: 0000000000000010 [ 251.826015] R13: ffff888097d19040 R14: ffff8880564d6700 R15: dffffc0000000000 [ 251.826025] FS: 00007f92960a7700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 251.826032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.826044] CR2: 0000000001d1e718 CR3: 0000000096bd4000 CR4: 00000000001406f0 [ 251.910104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.917361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.924611] Call Trace: [ 251.927190] hrtimer_try_to_cancel+0x74/0x5b0 [ 251.931800] ? hrtimer_run_softirq+0x270/0x270 [ 251.936374] ? __lock_is_held+0xb6/0x140 [ 251.940422] hrtimer_cancel+0x20/0x40 [ 251.944220] qdisc_watchdog_cancel+0x16/0x20 [ 251.948633] cbs_destroy+0x5e/0xd0 [ 251.952181] ? cbs_dequeue_soft+0x400/0x400 [ 251.956503] qdisc_create+0xaa6/0x1230 [ 251.960398] ? tc_get_qdisc+0xbb0/0xbb0 [ 251.963505] kobject: '7:3' (0000000077fd8d23): kobject_add_internal: parent: 'bdi', set: 'devices' [ 251.964377] ? nla_parse+0x1fc/0x2f0 [ 251.964390] tc_modify_qdisc+0x51b/0x1bdc [ 251.964406] ? qdisc_create+0x1230/0x1230 [ 251.973823] kobject: '7:3' (0000000077fd8d23): kobject_uevent_env [ 251.977278] ? find_held_lock+0x35/0x130 [ 251.977307] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.981528] kobject: '7:3' (0000000077fd8d23): fill_kobj_path: path = '/devices/virtual/bdi/7:3' [ 251.985584] ? qdisc_create+0x1230/0x1230 [ 251.985602] rtnetlink_rcv_msg+0x463/0xb00 [ 251.985617] ? rtnetlink_put_metrics+0x560/0x560 [ 251.985631] ? netdev_pick_tx+0x300/0x300 [ 251.985647] ? netlink_deliver_tap+0x22d/0xc20 [ 251.985662] ? find_held_lock+0x35/0x130 [ 251.985685] netlink_rcv_skb+0x17d/0x460 [ 251.996033] kobject: 'loop3' (00000000317e832f): kobject_add_internal: parent: 'block', set: 'devices' [ 252.001549] ? rtnetlink_put_metrics+0x560/0x560 [ 252.001569] ? netlink_ack+0xb30/0xb30 [ 252.001583] ? kasan_check_read+0x11/0x20 02:47:20 executing program 2: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x1}}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 252.001599] ? netlink_deliver_tap+0x254/0xc20 [ 252.011943] kobject: 'loop3' (00000000317e832f): kobject_uevent_env [ 252.014830] rtnetlink_rcv+0x1d/0x30 [ 252.014847] netlink_unicast+0x537/0x720 [ 252.014865] ? netlink_attachskb+0x770/0x770 [ 252.019299] kobject: 'loop3' (00000000317e832f): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.023895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.023916] netlink_sendmsg+0x8ae/0xd70 [ 252.023933] ? netlink_unicast+0x720/0x720 [ 252.023948] ? selinux_socket_sendmsg+0x36/0x40 [ 252.023963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.028772] kobject: 'holders' (00000000db4dd020): kobject_add_internal: parent: 'loop3', set: '' [ 252.032808] ? security_socket_sendmsg+0x8d/0xc0 [ 252.032828] ? netlink_unicast+0x720/0x720 [ 252.032840] sock_sendmsg+0xd7/0x130 [ 252.032852] ___sys_sendmsg+0x803/0x920 [ 252.032863] ? copy_msghdr_from_user+0x430/0x430 [ 252.032880] ? lock_downgrade+0x880/0x880 [ 252.032898] ? kasan_check_read+0x11/0x20 02:47:20 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 02:47:20 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup2(r1, r0) 02:47:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@srh, 0x8) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 02:47:20 executing program 2: [ 252.037438] kobject: 'slaves' (00000000ac96d8ef): kobject_add_internal: parent: 'loop3', set: '' [ 252.041052] ? __fget+0x367/0x540 [ 252.041067] ? iterate_fd+0x360/0x360 [ 252.041085] ? lock_downgrade+0x880/0x880 [ 252.041099] ? __fget_light+0x1a9/0x230 [ 252.041117] ? __fdget+0x1b/0x20 [ 252.051291] kobject: 'loop3' (00000000317e832f): kobject_uevent_env [ 252.055359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.055377] __sys_sendmsg+0x105/0x1d0 [ 252.055389] ? __ia32_sys_shutdown+0x80/0x80 [ 252.055409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 252.055424] ? do_syscall_64+0x26/0x620 [ 252.060089] kobject: 'loop3' (00000000317e832f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 252.063465] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.063485] ? do_syscall_64+0x26/0x620 [ 252.063502] __x64_sys_sendmsg+0x78/0xb0 [ 252.063520] do_syscall_64+0xfd/0x620 [ 252.072384] kobject: 'queue' (000000001c2c2bf4): kobject_add_internal: parent: 'loop3', set: '' 02:47:20 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) sendmmsg$sock(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="526b60ef8c0fbf8238f26ecdafbf97e69541b19392b3252280155728", 0x2000091c}], 0x1}, 0xfffffff0}], 0x1, 0xffffff7f) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0), &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x2) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x130, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x60041, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) [ 252.074510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.074527] RIP: 0033:0x45a219 [ 252.078709] kobject: 'mq' (0000000036ba11b0): kobject_add_internal: parent: 'loop3', set: '' [ 252.082282] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.082291] RSP: 002b:00007f92960a6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.082303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 02:47:20 executing program 2: [ 252.082310] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 252.082316] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.082322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92960a76d4 [ 252.082328] R13: 00000000004c8770 R14: 00000000004ded70 R15: 00000000ffffffff [ 252.082340] Modules linked in: [ 252.091865] kobject: 'mq' (0000000036ba11b0): kobject_uevent_env [ 252.108695] ---[ end trace f92a38457cdabbc9 ]--- 02:47:20 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='devpts\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1400) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0x0, 0x1b0, 0x80, 0x33, 0x0, r5}, {0x3fde2800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x7ff, 0x5}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9}}, 0xe8) quotactl(0x6, &(0x7f0000000000)='\x00', r5, &(0x7f0000000040)="3d487bd38388c47e6523bd77099abc8e830f8bdbe7de36a7ce75c64a8d48b27a1cbfd43af29d5c174d7051428dc1f79362c961aa517255b21005159cbb261b4d06c0b1d843862cc69efa693751d4491b42bde46e515c9ea7e84e3ea2a7b748236a1b600c9b61c7ae8aaec1b70f7381271a1f540b06f967f664dff086aa248700da5f3a5470effc08199b1aa448c5ec4fd636e0f4ceda669d6945b50b362fbebef4c981b2c952d4ff14a6964359cf9a35c43884d10c2dae7a4b82fd14eca7c99f16acfa8cd0c8017cd3ef80bca8a024d8bf2bf3f3859441cc91dac8") socket$packet(0x11, 0x2, 0x300) getpgid(0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000003d75ffeb0000000002000200", @ANYRES32=r5, @ANYBLOB="04f01345090000009dbfd69eb12504944e2d87152f57bce4091643a848a887c53b7a92b36dde144fa8b4b3391a99a88f461482f1a15081f88efe04fbc27e708c58a0f9894c36a0849f5ea449a4c5d1c04d74", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="110100000000000000000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492efc9b9cea18d7884aa1e81a0f3c50636dd23f5c2e9b02d4e2cbf5cceca5a14db5083c1aed6b165c02f47a3f48e86b00893a1b6d361fce6d727535a7d30fc40b8aba14152dee3b0dc7c7d5959"], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 02:47:20 executing program 2: clone(0x208007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) [ 252.118245] kobject: 'mq' (0000000036ba11b0): kobject_uevent_env: filter function caused the event to drop! [ 252.165364] RIP: 0010:hrtimer_active+0x11e/0x230 [ 252.177776] kobject: '0' (000000002f5e9a3c): kobject_add_internal: parent: 'mq', set: '' [ 252.227193] Code: 48 39 c3 0f 84 d3 00 00 00 e8 2e 22 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 252.233514] kobject: 'cpu0' (00000000275fe866): kobject_add_internal: parent: '0', set: '' [ 252.246712] devpts: called with bogus options [ 252.250676] RSP: 0018:ffff88805618f350 EFLAGS: 00010202 [ 252.291862] kobject: 'cpu1' (00000000dfdc6ea7): kobject_add_internal: parent: '0', set: '' [ 252.378207] kobject: 'queue' (000000001c2c2bf4): kobject_uevent_env [ 252.392449] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc900108d4000 [ 252.409834] kobject: 'queue' (000000001c2c2bf4): kobject_uevent_env: filter function caused the event to drop! [ 252.416023] RDX: 000000000000c95b RSI: ffffffff815ba512 RDI: ffff888097d19040 [ 252.421015] kobject: 'iosched' (000000003b3b10d4): kobject_add_internal: parent: 'queue', set: '' [ 252.429731] devpts: called with bogus options [ 252.437282] kobject: 'iosched' (000000003b3b10d4): kobject_uevent_env [ 252.454014] RBP: ffff88805618f3a8 R08: ffff888055f28280 R09: 0000000000000000 [ 252.466596] kobject: 'iosched' (000000003b3b10d4): kobject_uevent_env: filter function caused the event to drop! [ 252.472365] R10: ffffed1012fa31bc R11: ffff888097d18de7 R12: 0000000000000010 [ 252.474036] kobject: 'integrity' (000000006c597373): kobject_add_internal: parent: 'loop3', set: '' [ 252.480727] R13: ffff888097d19040 R14: ffff8880564d6700 R15: dffffc0000000000 [ 252.500970] kobject: 'integrity' (000000006c597373): kobject_uevent_env [ 252.506472] FS: 00007f92960a7700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 252.522468] kobject: 'integrity' (000000006c597373): kobject_uevent_env: filter function caused the event to drop! [ 252.525014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.557301] CR2: 000000000075c000 CR3: 0000000096bd4000 CR4: 00000000001406e0 [ 252.565991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.575531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.583943] Kernel panic - not syncing: Fatal exception [ 252.590234] Kernel Offset: disabled [ 252.594111] Rebooting in 86400 seconds..